Skip to content

Bump the minor-and-patch group with 2 updates#235

Closed
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/minor-and-patch-167944c1fb
Closed

Bump the minor-and-patch group with 2 updates#235
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/go_modules/minor-and-patch-167944c1fb

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot bot commented on behalf of github Mar 30, 2026

Bumps the minor-and-patch group with 2 updates: github.com/mark3labs/mcp-go and github.com/mattn/go-sqlite3.

Updates github.com/mark3labs/mcp-go from 0.45.0 to 0.46.0

Commits
  • 4d01ccd go fmt
  • 74a975a feature: Add prompt filter and handler middleware support (#751)
  • bbc88d3 Fix AddTaskTool task result payload handling (#765)
  • 4fa4dbf fix: cancel in-flight request contexts on notifications/cancelled (#756)
  • f2980c6 feat(server): add WithExperimental server option (#762)
  • d70b6bf fix(oauth): preserve path components during metadata discovery (#761)
  • 943f977 Add AgentRank score badge (#752)
  • dd37ef1 fix(server): reject sync calls to task-only tools (#759)
  • 8cbeefe feat(transport): make SSE endpoint and response timeouts configurable (#734)
  • a28eeb6 Replace invopop/jsonschema with google/jsonschema-go (#760)
  • Additional commits viewable in compare view

Updates github.com/mattn/go-sqlite3 from 1.14.37 to 1.14.38

Commits
  • edadafa Merge pull request #1381 from mattn/eliminate-bounds-checks
  • 8f9f86e Eliminate unnecessary bounds checks in hot paths
  • 0d23881 Merge pull request #1379 from theimpostor/pr-1322-missing-constraint-op-types
  • 84bdc43 add missing index constraint op types
  • 57e5007 Merge pull request #1313 from Jaculabilis/json-example
  • See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the minor-and-patch group with 2 updates: [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go) and [github.com/mattn/go-sqlite3](https://github.com/mattn/go-sqlite3).


Updates `github.com/mark3labs/mcp-go` from 0.45.0 to 0.46.0
- [Release notes](https://github.com/mark3labs/mcp-go/releases)
- [Commits](mark3labs/mcp-go@v0.45.0...v0.46.0)

Updates `github.com/mattn/go-sqlite3` from 1.14.37 to 1.14.38
- [Release notes](https://github.com/mattn/go-sqlite3/releases)
- [Commits](mattn/go-sqlite3@v1.14.37...v1.14.38)

---
updated-dependencies:
- dependency-name: github.com/mark3labs/mcp-go
  dependency-version: 0.46.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-and-patch
- dependency-name: github.com/mattn/go-sqlite3
  dependency-version: 1.14.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-and-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 30, 2026
@dependabot dependabot bot requested a review from wesm as a code owner March 30, 2026 20:39
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Mar 30, 2026
@roborev-ci
Copy link
Copy Markdown

roborev-ci bot commented Mar 30, 2026

roborev: Combined Review (0e3b81a)

Verdict: Changes are mostly clean, but one medium-severity issue should be addressed before merge.

Medium

  • go.mod:18, go.mod:21
    The direct dependency version bumps were committed without the corresponding go.sum refresh. On a clean checkout or in CI with -mod=readonly, this can fail dependency verification because the updated module hashes are missing.
    Fix: regenerate and commit go.sum, typically with go mod tidy or go mod download.

Synthesized from 3 reviews (agents: codex, gemini | types: default, security)

wesm added a commit that referenced this pull request Mar 31, 2026
Consolidates the following dependabot updates:

- #233 -- Bump DeterminateSystems/nix-installer-action from 21 to 22
- #234 -- Bump actions/setup-go from 6.3.0 to 6.4.0
- #235 -- Bump the minor-and-patch group with 2 updates (mcp-go v0.46.0, go-sqlite3 v1.14.38)

Also fixes all 343 golangci-lint v2 errcheck/staticcheck warnings that were blocking the pre-commit hook, and updates the nix vendorHash for the new go.sum.

Closes #233, #234, #235

🤖 Generated with [Claude Code](https://claude.com/claude-code)

Co-authored-by: wesm <wesm@users.noreply.github.com>
@dependabot @github
Copy link
Copy Markdown
Contributor Author

dependabot bot commented on behalf of github Mar 31, 2026

Looks like these dependencies are no longer updatable, so this is no longer needed.

@dependabot dependabot bot closed this Mar 31, 2026
@dependabot dependabot bot deleted the dependabot/go_modules/minor-and-patch-167944c1fb branch March 31, 2026 11:50
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants