Skip to content

chore(deps): update go github sdk - #916

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-github
Open

chore(deps): update go github sdk#916
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/go-github

Conversation

@renovate

@renovate renovate Bot commented May 22, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Change Age Confidence
github.com/bradleyfalzon/ghinstallation/v2 v2.18.0v2.19.0 age confidence
github.com/google/go-github/v84 v84.0.0v89.0.0 age confidence

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.


Release Notes

bradleyfalzon/ghinstallation (github.com/bradleyfalzon/ghinstallation/v2)

v2.19.0

Compare Source

What's Changed

Full Changelog: bradleyfalzon/ghinstallation@v2.18.0...v2.19.0

google/go-github (github.com/google/go-github/v84)

v89.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Pass DeploymentRequest and DeploymentStatusRequest by value (#​4361)
    BREAKING CHANGE: CreateDeployment and CreateDeploymentStatus now take DeploymentRequest and DeploymentStatusRequest by value; DeploymentRequest.Ref and DeploymentStatusRequest.State are now string, and DeploymentRequest.RequiredContexts is now []string.
  • refactor!: Pass HookConfig by value and rename EditHookConfiguration to UpdateHookConfiguration (#​4360)
    BREAKING CHANGE: EditHookConfiguration is renamed to UpdateHookConfiguration on RepositoriesService and OrganizationsService; these methods and AppsService.UpdateHookConfig now take HookConfig by value.
  • refactor!: Pass OIDCSubjectClaimCustomTemplate by value in the OIDC subject-claim Set methods (#​4340)
    BREAKING CHANGE: SetOrgOIDCSubjectClaimCustomTemplate and SetRepoOIDCSubjectClaimCustomTemplate now take their body params by value.
  • feat!: Refactor actions variables to pass request by value (#​4346)
    BREAKING CHANGE: ActionsService methods involving variables have new params and return values.
  • feat!: Replace actions env secret endpoints (#​4335)
    BREAKING CHANGE: ActionsService methods involving secrets have new params and return values.
  • refactor!: Pass CreateJITConfigRequest by value and rename Generate*JITConfig to Create*JITConfig (#​4337)
    BREAKING CHANGE: the JIT config methods are renamed from Generate*JITConfig to Create*JITConfig, and they now take CreateJITConfigRequest (renamed from GenerateJITConfigRequest) by value instead of by pointer.
  • refactor!: Pass release-notes and asset params by value and rename EditReleaseAsset to UpdateReleaseAsset (#​4336)
    BREAKING CHANGE: GenerateReleaseNotes now takes GenerateNotesRequest by value (renamed from GenerateNotesOptions); EditReleaseAsset is renamed to UpdateReleaseAsset and takes UpdateReleaseAssetRequest by value.
  • refactor!: Pass release params by value and rename EditRelease to UpdateRelease (#​4329)
    BREAKING CHANGE: CreateRelease & UpdateRelease now take RepositoryRelease by value; EditRelease is renamed to UpdateRelease.
  • refactor!: Pass GistsService required params by value (#​4320)
    BREAKING CHANGE: GistsService methods now pass required params by-value instead of by-ref.
  • fix!: Send request body in SCIM update methods (#​4315)
    BREAKING CHANGE: UpdateProvisionedOrgMembership and UpdateAttributeForSCIMUser params and return values changed.
  • fix!: Fix LicenseStatus response and Supportkey type (#​4297)
    BREAKING CHANGE: LicenseStatus.SupportKey type changed from *string to *bool and License return type is no longer a slice.
  • fix!: Enterprise App installation repos options structs (#​4298)
    BREAKING CHANGE: SelectedRepositoryIDs []int64 is now Repositories []string in *AppInstallationRepositoriesOptions.

...and the following additional changes:

  • chore: Bump version of go-github to v89.0.0 (#​4369)
  • feat: Add user team membership fields (#​4347)
  • chore: Add deprecated flag for unused metadata (#​4367)
  • docs: Add AGENTS.md and review-feedback tip (#​4368)
  • chore: Mark removed billing endpoints as deprecated (#​4362)
  • chore: Validate metadata (#​4358)
  • chore: Bump golang.org/x/tools to v0.47.0 (#​4357)
  • build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 in the actions group (#​4349)
  • build(deps): Bump the go_modules group in /example (#​4345)
  • feat: Add AccessSource to Team (#​4344)
  • docs: Update CONTRIBUTING.md (#​4341)
  • build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#​4342)
  • docs: Extend CONTRIBUTING.md with code guidelines (#​4339)
  • fix: AuditEntry fields org and org_id can be an array (#​4333)
  • build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the actions group (#​4332)
  • feat: Add code quality findings support (#​4330)
  • chore: Update openapi_operations.yaml (#​4331)
  • chore: Replace time.Date with referenceTime (#​4325)
  • test: Refactor tests for ProjectV2Item.UnmarshalJSON (#​4323)
  • chore: Remove obsolete test/fields utility (#​4322)
  • feat: Add Issue Dependencies API support (#​4130)
  • fix: Set GetBody on uploads for HTTP/2 retry (#​4318)
  • chore: Remove deleted account from REVIEWERS (#​4317)
  • build(deps): Bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /example (#​4305)
  • build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0 (#​4303)
  • build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in /scrape (#​4302)
  • build(deps): Bump golang.org/x/term from 0.43.0 to 0.44.0 in /example (#​4304)
  • build(deps): Bump golang.org/x/tools from 0.45.0 to 0.46.0 in /tools (#​4314)
  • build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 in /example (#​4306)
  • refactor: Fix parameters in method endpoints (#​4300)
  • feat: Add enterprise billing usage endpoints and response types (#​4288)
  • build(deps): Bump golang.org/x/sync from 0.20.0 to 0.21.0 in /tools (#​4294)
  • build(deps): Bump github.com/getkin/kin-openapi from 0.139.0 to 0.140.0 in /tools (#​4295)
  • build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 in the actions group (#​4293)
  • fix: Reject URL path segments containing percent-encoded dots (#​4291)
  • fix: Comparison of durations in AbuseRateLimitError.Is (#​4292)
  • test: Replace &x variables with inline Ptr(value) calls (#​4289)
  • feat: Inject OpenAPI deprecations safely (#​4286)
  • chore: Remove 'munlicode' from REVIEWERS (#​4287)
  • feat: Add GetOrgAICreditUsage and GetUserAICreditUsage endpoints (#​4282)
  • test: Fix test names and error messages (#​4284)
  • test: Use testJSONBody helper for request body assertions (#​4283)
  • feat: Add pull request fields to Repository (#​4268)
  • build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#​4272)
  • build(deps): Bump go.opentelemetry.io/otel to v1.44.0 (#​4280)
  • build(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0 in /scrape (#​4271)
  • build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /example (#​4273)
  • fix: Handle missing reviewer type in RequiredReviewer unmarshal (#​4270)
  • test: Remove redundant Marshal tests (#​4266)
  • chore: Update openapi_operations.yaml (#​4265)
  • feat: Add support for GitHub Code Quality API (#​4260)
  • build(deps): Bump github.com/getkin/kin-openapi from 0.138.0 to 0.139.0 in /tools (#​4261)
  • chore: Fix zizmor security issues in GHA workflows (#​4259)
  • feat: Add support for getting Copilot cloud agent configuration (#​4241)
  • feat: Add client API version support (#​4246)
  • test: Add secret scanning marshal tests (#​4252)
  • lint: Improve extraneousnew linter to catch unnecessary use of value var (#​4249)
  • build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1 (#​4248)
  • chore: Bump go-github from v87 to v88 in /scrape (#​4247)

v88.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Change app installation Find* methods to Get* (#​4243)
    BREAKING CHANGE: App installation methods are renamed from Find* to Get*.

...and the following additional changes:

  • chore: Bump version of go-github to v88.0.0 (#​4245)
  • chore: Update openapi_operations.yaml (#​4242)
  • feat: Add support for setting client URLs (#​4240)
  • refactor: Add constants for API versions (#​4236)
  • docs: Formatting and punctuation changes (#​4235)
  • feat: Add GetParentIssue for sub-issues (#​4232)
  • chore: Bump go-github from v86 to v87 in /scrape (#​4234)

v87.0.0

Compare Source

This release contains the following breaking API changes:

  • refactor!: Change GetConsumedLicenses to ListConsumedLicenses (#​4226)
    BREAKING CHANGE: EnterpriseService.GetConsumedLicenses is now EnterpriseService.ListConsumedLicenses.
  • refactor!: Change GetAllRepositoryRulesets to ListAllRepositoryRulesets (#​4227)
    BREAKING CHANGE: OrganizationsService.GetAllRepositoryRulesets is now OrganizationsService.ListAllRepositoryRulesets.
  • refactor!: Change GetRulesForBranch to ListRulesForBranch (#​4229)
    BREAKING CHANGE: RepositoriesService.GetRulesForBranch is now RepositoriesService.ListRulesForBranch.
  • feat!: Refactor client constructor to use options pattern (#​4201)
    BREAKING CHANGE: Clients are now constructed with a nicer builder pattern. See docs for details.
  • fix!: Align IssueFieldValues with schema (#​4207)
    BREAKING CHANGE: IssueRequest.IssueFieldValues type is changed.

...and the following additional changes:

  • chore: Bump version of go-github to v87.0.0 (#​4233)
  • feat: Add enterprise app installation lookup (#​4230)
  • chore: Update openapi_operations.yaml (#​4228)
  • fix: Use value receiver for MarshalJSON (#​4211)
  • chore: Update dependencies (#​4224)
  • fix: Close httptest server to prevent test flakiness (#​4210)
  • feat: Add two new fields to org CodeSecurityConfiguration (#​4205)
  • chore: Bump golangci-lint to v2.12.2 (#​4206)
  • build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 in /example (#​4203)
  • fix: Limit HTTP error response body reads to prevent OOM (#​4191)
  • feat: Add issue field values support for write and read (#​4200)
  • chore: Bump go-github from v85 to v86 in /scrape (#​4199)

v86.0.0

Compare Source

This release contains the following breaking API changes:

  • feat!: Refactor request context (#​4151)
    BREAKING CHANGE: All internal calls now provide Context via the Request itself.
  • feat!: Add OIDC authentication support to PrivateRegistries (#​4159)
    BREAKING CHANGE: PrivateRegistriesService is updated to API version 2026-03-10 with struct and response changes.

...and the following additional changes:

  • chore: Bump version of go-github to v86.0.0 (#​4198)
  • test: Fix invalid JSON payloads in actions workflow runs tests (#​4197)
  • feat: Add repo download contents sentinel errors (#​4192)
  • chore: Fix otel module name (#​4187)
  • feat: Add typed Copilot metrics download helpers (#​4177)
  • feat: Add deploy_keys_enabled_for_repositories and secret scanning custom link fields to Organization struct (#​4188)
  • refactor: Use testJSONBody helper for request body assertions in tests (#​4183)
  • build(deps): Bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 in /tools (#​4184)
  • fix: Include RetryAfter in AbuseRateLimitError.Error output (#​4181)
  • fix: Handle string-typed reviewer ID in Ruleset API responses (#​4178)
  • feat: Add ArchivedAt field to Organization struct (#​4179)
  • feat: Add Copilot coding agent and content exclusion org endpoints (#​4176)
  • chore: Bump go-github from v84 to v85 in /scrape (#​4174)

v85.0.0

Compare Source

This release contains the following breaking API changes:

  • fix!: Resolve inconsistent options for create and update on custom org role (#​4075)
    BREAKING CHANGE: GetOrgRole, CreateCustomOrgRole, and UpdateCustomOrgRole have new params and return values.
  • fix!: Change id from int64 to string in ActivityService.MarkThreadDone (#​4056)
    BREAKING CHANGE: ActivityService.MarkThreadDone accepts string id instead of int64.

...and the following additional changes:

  • chore: Bump version of go-github to v85.0.0 (#​4173)
  • chore: Update openapi_operations.yaml (#​4172)
  • security: Reject cross-host redirects to prevent Authorization leak (#​4171)
  • chore: Improve GitHub Actions workflows lint and testing (#​4169)
  • chore: Switch legacy redirect handling to new pattern (#​4161)
  • feat: Add CodeSecurity to SecurityAndAnalysis (#​4155)
  • fix: Reject URL path segments containing ".." in all request methods (#​4150)
  • feat: Refactor repositories download contents (#​4153)
  • chore: Bump google.org/x/tools to v0.44.0 in /tools (#​4168)
  • docs: Fix broken blog post link (#​4160)
  • build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 in /example (#​4156)
  • chore: Update openapi_operations.yaml (#​4157)
  • feat: Remove Google App Engine standard support (#​4152)
  • feat: Add DownloadCopilotMetrics helper method (#​4149)
  • docs: Add apiVersion to GitHub API link (#​4147)
  • chore: Simplify redundantptr custom linter (#​4148)
  • docs: Deprecate old Copilot metrics endpoints closed on April 2, 2026 (#​4137)
  • refactor: Remove redundant github.Ptr calls (#​4145)
  • fix: Add missing User fields (#​4146)
  • fix: Preserve Marketplace.Stubbed during client copy (#​4144)
  • refactor: Simplify array copying (#​4143)
  • build(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 in /example (#​4141)
  • build(deps): Bump github.com/getkin/kin-openapi from 0.134.0 to 0.135.0 in /tools (#​4142)
  • build(deps): Bump golang.org/x/term from 0.41.0 to 0.42.0 in /example (#​4140)
  • build(deps): Bump golang.org/x/net from 0.52.0 to 0.53.0 in /scrape (#​4139)
  • build(deps): Bump go.opentelemetry.io/otel to v1.43.0 (#​4135)
  • fix: Expand sanitizeURL secrets redactions (#​4126)
  • build(deps): Bump github.com/alecthomas/kong from 1.14.0 to 1.15.0 in /tools (#​4132)
  • build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#​4131)
  • feat: Add support for custom names and methods that return structs with multiple []*T fields in gen-iterators.go (#​4128)
  • fix: Limit webhook payload size in ValidatePayloadFromBody (#​4125)
  • build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 (#​4123)
  • fix: Synchronize requestCount in rate limit tests (#​4124)
  • chore: Simplify generate.sh by removing git worktree and using generator-based check (#​4120)
  • docs: Improve comments in /examples (#​4122)
  • chore: Use golangci-lint-action; remove newreposecretwithlibsodium (#​4119)
  • feat: Add custom image endpoints for GitHub-hosted runners (#​4101)
  • chore: Cache custom golangci-lint binaries in GHA workflow (#​4116)
  • build(deps): Bump github.com/ProtonMail/go-crypto from 1.4.0 to 1.4.1 in /example (#​4115)
  • build(deps): Bump golang.org/x/tools from 0.29.0 to 0.43.0 in /tools/extraneous-new (#​4114)
  • build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#​4112)
  • build(deps): Bump github.com/golangci/plugin-module-register from 0.1.1 to 0.1.2 in /tools/extraneous-new (#​4113)
  • build(deps): Bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 in /tools (#​4111)
  • build(deps): Bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 in /scrape (#​4110)
  • chore: Upgrade deps for linters using dependabot (#​4107)
  • chore: Use structfield.Settings in check-structfield-settings (#​4108)
  • build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in /example (#​4109)
  • chore: Remove unnecessary use of new and &SomeStruct{} and add new extraneousnew custom linter (#​4106)
  • feat: Add NetworkConfigurationID and HostedRunnersURL to enterprise runner group types (#​4099)
  • feat: Generate accessors for all fields (#​4105)
  • feat: Add ListRunnerGroupHostedRunners for org runner groups (#​4100)
  • chore: Enable default: none linters; remove duplicated (#​4097)
  • fix: Use Cursor pagination for *.ListHookDeliveriesIter (#​4096)
  • chore: Remove duplicated formatters (#​4094)
  • chore: Fix typos in comments and tests (#​4093)
  • chore: Fix typo in CONTRIBUTING.md (#​4092)
  • chore: Update openapi_operations.yaml (#​4091)
  • build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 in /example (#​4084)
  • chore: Bump go.opentelemetry.io/otel to v1.42.0 (#​4090)
  • build(deps): Bump golang.org/x/crypto from 0.48.0 to 0.49.0 in /example (#​4081)
  • build(deps): Bump golang.org/x/sync from 0.19.0 to 0.20.0 in /tools (#​4078)
  • build(deps): Bump golang.org/x/net from 0.51.0 to 0.52.0 in /scrape (#​4079)
  • test: Add fuzz test for ParseWebHook (#​4076)
  • feat: Add enterprise budgets API (#​4069)
  • feat: Add list organization fine-grained permissions (#​4072)
  • feat: Make script/lint.sh output simpler to read (#​4073)
  • chore: Speed up linting (#​4071)
  • build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /otel (#​4065)
  • build(deps): Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /otel (#​4068)
  • build(deps): Bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.40.0 to 1.41.0 in /example (#​4062)
  • build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /example (#​4064)
  • build(deps): Bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0 in /example (#​4063)
  • feat: Add client_id field to App (#​4060)
  • test: Simplify CopilotService tests (#​4058)
  • test: Fix flaky TestDo_rateLimit_abuseRateLimitError_xRateLimitReset (#​4057)
  • feat: Add support for enterprise audit log streaming API (#​4035)
  • feat: Add repository-level immutable releases settings (#​4039)
  • chore: Add SAS as a common initialism to structfield (#​4054)
  • fix: Fix data race on Windows (#​4051)
  • docs: Fix grammar in README.md (#​4053)
  • chore: Simplify form value assertions in tests (#​4048)
  • chore: Bump go-github from v83 to v84 in /scrape (#​4050)

Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate Bot added the renovate label May 22, 2026
@github-project-automation github-project-automation Bot moved this to 📋 Backlog in Burrito May 22, 2026
@renovate
renovate Bot force-pushed the renovate/go-github branch from 5303984 to 96065cb Compare May 28, 2026 22:21
@renovate renovate Bot changed the title chore(deps): update module github.com/google/go-github/v84 to v88 chore(deps): update go github sdk to v88 Jun 2, 2026
@corrieriluca corrieriluca added the breaking-change When the Renovate PR needs change in the code for the program to compile/pass tests. label Jun 5, 2026
@renovate renovate Bot changed the title chore(deps): update go github sdk to v88 chore(deps): update go github sdk Jun 12, 2026
@renovate
renovate Bot force-pushed the renovate/go-github branch from 96065cb to 451d529 Compare June 12, 2026 00:02
@renovate
renovate Bot force-pushed the renovate/go-github branch 2 times, most recently from 8125434 to 78019db Compare July 12, 2026 14:43
@renovate
renovate Bot force-pushed the renovate/go-github branch from 78019db to f037fda Compare July 17, 2026 12:28
@renovate
renovate Bot force-pushed the renovate/go-github branch from f037fda to fa53adf Compare July 20, 2026 23:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

breaking-change When the Renovate PR needs change in the code for the program to compile/pass tests. renovate team:library-maintainers

Projects

Status: 📋 Backlog

Development

Successfully merging this pull request may close these issues.

1 participant