build(deps): bump the dependabot-gomod-minor group with 4 updates by dependabot[bot] · Pull Request #432 · microsoft/azure-linux-dev-tools

dependabot · 2026-11-10T20:34:19Z

Bumps the dependabot-gomod-minor group with 4 updates: github.com/go-playground/validator/v10, github.com/mark3labs/mcp-go, github.com/spf13/pflag and golang.org/x/sync.

Updates github.com/go-playground/validator/v10 from 10.30.5 to 10.30.6

Release notes

Sourced from github.com/go-playground/validator/v10's releases.

v10.30.6

What's Changed

fix: update the KR and IL postcode patterns to the current national formats by @yu2971512385-ui in go-playground/validator#1644

fix: accept Taiwan six-digit postcodes by @sb123sb123 in go-playground/validator#1642

docs: use the registered fieldcontains tag in usage example by @lazerg in go-playground/validator#1635

fix: fully anchor Costa Rica postcode regex by @sb123sb123 in go-playground/validator#1648

feat: add duration validator for time.ParseDuration strings by @ahmedkamalio in go-playground/validator#1649

chore(deps): bump github.com/go-playground/universal-translator from 0.18.1 to 0.18.2 by @dependabot[bot] in go-playground/validator#1653

feat: Add hostname label validation tag by @KytnaCode in go-playground/validator#1616

chore(deps): bump github.com/go-playground/locales from 0.14.1 to 0.14.2 by @dependabot[bot] in go-playground/validator#1663

Align excluded_without with its stated multi-field contract by @dylanpulver in go-playground/validator#1621

fix: accept Nigeria's 11-character postcodes by @Adeniyikayodee in go-playground/validator#1664

chore(deps): bump golang.org/x/crypto from 0.57.0 to 0.58.0 by @dependabot[bot] in go-playground/validator#1670

ci: send coverage from the Go 1.26.x leg (step skipped since #1535) by @glaziermag in go-playground/validator#1671

Clarify separators for non-existent directory paths by @yuefdev in go-playground/validator#1672

Add postcode patterns for IE (Ireland), AL (Albania), GI (Gibraltar) and IL (Israel) by @JohannesHepp in go-playground/validator#1629

chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16 by @dependabot[bot] in go-playground/validator#1680

docs: fix stale alias, uuid and snippet details in package docs by @yxshee in go-playground/validator#1679

fix: anchor GB and LI postcode patterns as a whole by @beduldul in go-playground/validator#1646

fix: reject ULIDs outside the 128-bit range by @sergioperezcheco in go-playground/validator#1660

fix: reject duplicate variants in strict BCP47 tags by @guocn in go-playground/validator#1678

Convert to time.Time before asserting in isNeField by @youdie006 in go-playground/validator#1619

Add uuid7 validation tag by @ChrisJr404 in go-playground/validator#1614

New Contributors

@yu2971512385-ui made their first contribution in go-playground/validator#1644

@sb123sb123 made their first contribution in go-playground/validator#1642

@lazerg made their first contribution in go-playground/validator#1635

@KytnaCode made their first contribution in go-playground/validator#1616

@dylanpulver made their first contribution in go-playground/validator#1621

@Adeniyikayodee made their first contribution in go-playground/validator#1664

@glaziermag made their first contribution in go-playground/validator#1671

@yuefdev made their first contribution in go-playground/validator#1672

@JohannesHepp made their first contribution in go-playground/validator#1629

@yxshee made their first contribution in go-playground/validator#1679

@beduldul made their first contribution in go-playground/validator#1646

@sergioperezcheco made their first contribution in go-playground/validator#1660

@guocn made their first contribution in go-playground/validator#1678

@youdie006 made their first contribution in go-playground/validator#1619

@ChrisJr404 made their first contribution in go-playground/validator#1614

Full Changelog: go-playground/validator@v10.30.5...v10.30.6

Commits

19397f2 Add uuid7 validation tag (#1614)
5b09d8d Convert to time.Time before asserting in isNeField (#1619)
563e738 fix: reject duplicate variants in strict BCP47 tags (#1678)
0f885d2 fix: reject ULIDs outside the 128-bit range (#1660)
c9cfe75 fix: anchor GB and LI postcode patterns as a whole (#1646)
29d05a7 docs: fix stale alias, uuid and snippet details in package docs (#1679)
0411012 chore(deps): bump github.com/gabriel-vasile/mimetype from 1.4.15 to 1.4.16 (#...
a5843c6 Add postcode patterns for IE (Ireland), AL (Albania), GI (Gibraltar) and IL (...
c29fac1 Clarify separators for non-existent directory paths (#1672)
3b54840 ci: send coverage from the Go 1.26.x leg (step skipped since #1535) (#1671)
Additional commits viewable in compare view

Updates github.com/mark3labs/mcp-go from 1.4.0 to 1.5.0

Release notes

Sourced from github.com/mark3labs/mcp-go's releases.

Release v1.5.0

What's Changed

fix(server): send a request's notifications on its POST stream by @QuentinBisson in mark3labs/mcp-go#1117

fix(server): bound the request body read by the SSE message endpoint by @QuentinBisson in mark3labs/mcp-go#1119

fix(client): bound the messages the HTTP transports read from the server by @QuentinBisson in mark3labs/mcp-go#1121

fix(oauth): accept case variants of localhost redirect hosts by @ezynda3 in mark3labs/mcp-go#1125

fix(stdio): cancel tool calls still waiting for a worker by @jaeminbird in mark3labs/mcp-go#1129

feat(client): add WithManualInputRoundTrips for caller-driven input by @dougkirkley in mark3labs/mcp-go#1132

fix(stdio): answer tool calls still queued when input ends by @sarankumar1325 in mark3labs/mcp-go#1134

fix(server): refuse subscriptions/listen when the response cannot stream by @zerone0x in mark3labs/mcp-go#1138

New Contributors

@jaeminbird made their first contribution in mark3labs/mcp-go#1129

@dougkirkley made their first contribution in mark3labs/mcp-go#1132

@sarankumar1325 made their first contribution in mark3labs/mcp-go#1134

@zerone0x made their first contribution in mark3labs/mcp-go#1138

Full Changelog: mark3labs/mcp-go@v1.4.0...v1.5.0

Commits

c10cb8f fix(server): refuse subscriptions/listen when the response cannot stream (#1138)
a4cc633 fix(stdio): answer tool calls still queued when input ends (#1134)
1c150e8 feat(client): add WithManualInputRoundTrips for caller-driven input (#1132)
74945ac fix(stdio): cancel tool calls still waiting for a worker (#1129)
fbc24fd fix(oauth): accept case variants of localhost redirect hosts (#1125)
cfabbdc fix(client): bound the messages the HTTP transports read from the server (#1121)
971d157 fix(server): bound the request body read by the SSE message endpoint (#1119)
4944283 fix(server): send a request's notifications on its POST stream (#1117)
See full diff in compare view

Updates github.com/spf13/pflag from 1.0.10 to 1.1.0

Release notes

Sourced from github.com/spf13/pflag's releases.

v1.1.0

It's been long enough, and enough things have been fixed, that it might be time to release a new version, even if there isn't any particular big new issue to market as the reason for this release.

If you notice anything breaking, it is entirely un-intentional, but you might also have been relying on undocumented or buggy behavior. Please file an issue describing what you're doing, how it worked before this release and why it doesn't work anymore, and pin your projects to v1.0.10 (the latest release before this one) while we decide how to address your concerns.

What's Changed

README: update badges and minor linting fixes by @thaJeztah in spf13/pflag#452

Show 'correct' explicit bool value syntax in help by @alimpfard in spf13/pflag#453

Fix for Go 1.24 by @pterjan in spf13/pflag#460

fix(map): ensure string-to-string flags maintain stable pointers by @brandon1024 in spf13/pflag#457

Fix getFlagType error message by @wellitonscheer in spf13/pflag#462

update actions, and fix linting issues by @thaJeztah in spf13/pflag#450

fix: README.md indicating the use of godoc(deprecated) by @malklera in spf13/pflag#467

Fix broken link to POSIX argument conventions by @tomasaschan in spf13/pflag#464

Replace raw stdlib parse errors in typed flag Set methods (#269) by @reuvenharrison in spf13/pflag#469

Extend UnknownFlags to UnknownFlagsHandling and introduce PassUnknownFlagToArgs (#337) by @ikedam in spf13/pflag#440

fix: allow nil default IP flags in GetIP by @happysnaker in spf13/pflag#483

fix: allow hex input in UintSlice by @happysnaker in spf13/pflag#484

fix: honor custom IsBoolFlag compatibility by @happysnaker in spf13/pflag#487

docs: clarify SortFlags example with complete runnable program by @happysnaker in spf13/pflag#488

docs: add release process documentation by @happysnaker in spf13/pflag#490

fix: print to set destination, not hardcoded os.Stderr by @quite in spf13/pflag#502

ci: bump golangci-lint to v2.13 for Go 1.27 by @hdimer in spf13/pflag#508

Initialize the target map when a StringToString flag has a nil default by @nikolauspschuetz in spf13/pflag#506

fix: honour deprecated ParseErrorsWhitelist.UnknownFlagsHandling by @lenamonj in spf13/pflag#507

test: add StringSlice Append coverage by @LY-19418 in spf13/pflag#504

Keep wrapping after an unbreakable usage word by @AzazelSensei in spf13/pflag#503

Validate IP slice values before appending or replacing by @agammann in spf13/pflag#513

fix(ci): Use the latest golangci-lint release by @tomasaschan in spf13/pflag#525

Reject IPv6 addresses as IPv4 masks by @yuefdev in spf13/pflag#524

Report the flag name as typed in deprecation warnings by @hdimer in spf13/pflag#500

Document non-interspersed argument parsing by @yuefdev in spf13/pflag#523

Preserve trailing whitespace in StringToString formatting by @r4venrudy in spf13/pflag#522

Reject extra CSV records in StringToString arguments by @Harshil-1603 in spf13/pflag#521

Preserve current string values in CopyToGoFlagSet by @adenzhou1350 in spf13/pflag#520

Fix type identification and mismatch checks for text flags by @dewanshshekhar in spf13/pflag#526

fix: enforce native integer flag bounds on 32-bit platforms by @gdpu11 in spf13/pflag#534

fix: preserve count flag values when parsing fails by @gdpu11 in spf13/pflag#533

New Contributors

@alimpfard made their first contribution in spf13/pflag#453

@pterjan made their first contribution in spf13/pflag#460

@brandon1024 made their first contribution in spf13/pflag#457

@wellitonscheer made their first contribution in spf13/pflag#462

@malklera made their first contribution in spf13/pflag#467

@reuvenharrison made their first contribution in spf13/pflag#469

@ikedam made their first contribution in spf13/pflag#440

@happysnaker made their first contribution in spf13/pflag#483

@quite made their first contribution in spf13/pflag#502

@hdimer made their first contribution in spf13/pflag#508

... (truncated)

Commits

f8a9906 Merge pull request #533 from gdpu11/fix/count-preserve-value-on-error
f3a68a1 Merge pull request #534 from gdpu11/fix/native-integer-ranges
70f7745 fix: reject native integer flag overflow on 32-bit systems
2084408 test: cover native integer flag bounds on 32-bit systems
7d0f377 fix: preserve count flag values when parsing fails
d26a4dc Merge pull request #526 from dewanshshekhar/fix/text-flag-type-check
2d401c7 Fix type identification for text flags
fa584ba Merge pull request #520 from adenzhou1350/codex/fix-copy-go-string-value
cc9e689 Merge upstream master and retain its linter version
70f284b Merge pull request #521 from Harshil-1603/fix/string-map-records
Additional commits viewable in compare view

Updates golang.org/x/sync from 0.24.0 to 0.25.0

Commits

1f920df syncmap: rename DeepCopyMap to CopyMap
See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
@dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
@dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
@dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
@dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Copilot

🟢 Approval recommended

The dependency and checksum updates have no active review issues.

No open issues 🎉

What changed in this PR

Updates azldev’s Go dependencies through the Dependabot minor-update group, covering validation, MCP integration, CLI flag parsing, and synchronization utilities.

Changes:

Bumps validator/v10 to 10.30.6, mcp-go to 1.5.0, pflag to 1.1.0, and golang.org/x/sync to 0.25.0.
Updates related indirect dependencies and module checksums.

File	Description
`go.sum`	Refreshes checksums for updated direct and transitive dependencies.
`go.mod`	Updates four direct dependencies and related indirect dependency versions.

_{Review effort: Balanced}

reuben olinsky (reubeno) · 2026-11-11T20:48:05Z

Copilot The snapshots in the repo need updating in accordance with standard practice (mage scenarioUpdate), due to upstream changes coming down in this PR. Please update the PR to incorporate them.

Copilot

🟢 Approval recommended

No active review issues are reported for the dependency updates and accompanying CLI documentation and snapshot changes.

No open issues 🎉

_{Review effort: Balanced}

Bumps the dependabot-gomod-minor group with 4 updates: [github.com/go-playground/validator/v10](https://github.com/go-playground/validator), [github.com/mark3labs/mcp-go](https://github.com/mark3labs/mcp-go), [github.com/spf13/pflag](https://github.com/spf13/pflag) and [golang.org/x/sync](https://github.com/golang/sync). Updates `github.com/go-playground/validator/v10` from 10.30.5 to 10.30.6 - [Release notes](https://github.com/go-playground/validator/releases) - [Commits](go-playground/validator@v10.30.5...v10.30.6) Updates `github.com/mark3labs/mcp-go` from 1.4.0 to 1.5.0 - [Release notes](https://github.com/mark3labs/mcp-go/releases) - [Commits](mark3labs/mcp-go@v1.4.0...v1.5.0) Updates `github.com/spf13/pflag` from 1.0.10 to 1.1.0 - [Release notes](https://github.com/spf13/pflag/releases) - [Commits](spf13/pflag@v1.0.10...v1.1.0) Updates `golang.org/x/sync` from 0.24.0 to 0.25.0 - [Commits](golang/sync@v0.24.0...v0.25.0) --- updated-dependencies: - dependency-name: github.com/go-playground/validator/v10 dependency-version: 10.30.6 dependency-type: direct:production update-type: version-update:semver-patch dependency-group: dependabot-gomod-minor - dependency-name: github.com/mark3labs/mcp-go dependency-version: 1.5.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependabot-gomod-minor - dependency-name: github.com/spf13/pflag dependency-version: 1.1.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependabot-gomod-minor - dependency-name: golang.org/x/sync dependency-version: 0.25.0 dependency-type: direct:production update-type: version-update:semver-minor dependency-group: dependabot-gomod-minor ... Signed-off-by: dependabot[bot] <support@github.com>

Regenerate CLI reference documentation and scenario snapshots to match the boolean flag help format introduced by pflag v1.1.0. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Copilot

🟢 Approval recommended

No active review issues are reported for the dependency updates and accompanying CLI documentation and snapshot refresh.

No open issues 🎉

_{Review effort: Balanced}

dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Nov 10, 2026

Copilot AI balanced review requested due to automatic review settings November 10, 2026 20:34

Copilot started reviewing November 10, 2026 20:34

View session

Copilot AI reviewed Nov 10, 2026

View reviewed changes

Copilot AI balanced review requested due to automatic review settings November 11, 2026 21:46

Copilot started reviewing November 11, 2026 21:46

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

dependabot Bot and others added 2 commits November 11, 2026 21:50

fix(ci): refresh CLI docs and snapshots for pflag update

65d8c27

Regenerate CLI reference documentation and scenario snapshots to match the boolean flag help format introduced by pflag v1.1.0. Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>

Nan Liu (liunan-ms) force-pushed the dependabot/go_modules/dependabot-gomod-minor-b0eb1e652d branch from a520366 to 65d8c27 Compare November 11, 2026 22:06

Copilot AI balanced review requested due to automatic review settings November 11, 2026 22:06

Copilot started reviewing November 11, 2026 22:07

View session

Copilot AI reviewed Nov 11, 2026

View reviewed changes

Nan Liu (liunan-ms) approved these changes Nov 11, 2026

View reviewed changes

Nan Liu (liunan-ms) merged commit a69c552 into main Nov 11, 2026
22 checks passed

Navigation Menu

Repository navigation

build(deps): bump the dependabot-gomod-minor group with 4 updates - #432

build(deps): bump the dependabot-gomod-minor group with 4 updates#432
Nan Liu (liunan-ms) merged 2 commits into
mainfrom
dependabot/go_modules/dependabot-gomod-minor-b0eb1e652d

dependabot Bot commented on behalf of github Nov 10, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

reuben olinsky (reubeno) commented Nov 11, 2026

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

Conversation

dependabot Bot commented on behalf of github Nov 10, 2026

v10.30.6

What's Changed

New Contributors

Release v1.5.0

What's Changed

New Contributors

v1.1.0

What's Changed

New Contributors

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

reuben olinsky (reubeno) commented Nov 11, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

🟢 Approval recommended

Uh oh!

Uh oh!

Reviewers

Uh oh!

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants