build(deps): bump github.com/modelcontextprotocol/registry from 1.5.0 to 1.7.9 - #659
Merged
github-actions[bot] merged 2 commits intoAug 30, 2026
Conversation
Bumps [github.com/modelcontextprotocol/registry](https://github.com/modelcontextprotocol/registry) from 1.5.0 to 1.7.9. - [Release notes](https://github.com/modelcontextprotocol/registry/releases) - [Commits](modelcontextprotocol/registry@v1.5.0...v1.7.9) --- updated-dependencies: - dependency-name: github.com/modelcontextprotocol/registry dependency-version: 1.7.9 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
build
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Codecov Report✅ All modified and coverable lines are covered by tests. Additional details and impacted files@@ Coverage Diff @@
## main #659 +/- ##
==========================================
- Coverage 72.59% 72.56% -0.03%
==========================================
Files 239 239
Lines 20228 20228
==========================================
- Hits 14684 14679 -5
- Misses 4274 4275 +1
- Partials 1270 1274 +4 ☔ View full report in Codecov by Harness. 🚀 New features to boost your workflow:
|
Dependabot's registry v1.7.9 bump broke the `build` job: goreleaser v2.15.3 (a `go tool` dep the job compiles from source via make build-snapshot) hard-calls the 3-arg auth.NewGitHubATProvider, which registry dropped to 2 args at v1.6.0. So any registry >= v1.6.0 fails goreleaser's compile — v1.7.9 and v1.8.x alike. goreleaser sets registry's ceiling but was frozen at v2.15.3 because it's declared // indirect (dependabot only files bumps for direct deps). Bumping the tool to v2.17.1 adopts the 2-arg call and floors registry at v1.8.0 — the highest goreleaser patch that stays on Go 1.26 (v2.18.0 requires 1.27). Verified: make build-snapshot succeeds, plus go build/vet/test ./... all pass. ❤️ Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
zimeg
force-pushed
the
dependabot/go_modules/github.com/modelcontextprotocol/registry-1.7.9
branch
from
August 30, 2026 18:53
272db56 to
7b16c4a
Compare
github-actions
Bot
deleted the
dependabot/go_modules/github.com/modelcontextprotocol/registry-1.7.9
branch
August 30, 2026 18:57
zimeg
added a commit
that referenced
this pull request
Aug 30, 2026
Bring the Go 1.27 bump current with main after the goreleaser/registry fix landed (#659): go.mod/go.sum re-tidied under Go 1.27, keeping goreleaser v2.17.1 + registry v1.8.0. Verified: go build ./..., full test suite, and make build-snapshot (goreleaser compile-from-source) all green under 1.27. ❤️ Co-Authored-By: Claude <svc-devxp-claude@slack-corp.com>
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Bumps github.com/modelcontextprotocol/registry from 1.5.0 to 1.7.9.
Release notes
Sourced from github.com/modelcontextprotocol/registry's releases.
... (truncated)
Commits
35b2071fix(validators/oci): fail closed on upstream rate limiting (#1281)4e319e8build(deps): bump github.com/go-git/go-git/v5 from 5.18.0 to 5.19.0 in /deplo...276037bdocs(complete): align publish CLI flags with implementation (closes #767) (#1...1d36806build(deps): bump golang.org/x/mod from 0.35.0 to 0.36.0 (#1271)7bc506fbuild(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.236.0 to 3.237.0 in ...fe0cb3bbuild(deps): bump sigstore/cosign-installer from 4.1.1 to 4.1.2 in the action...8af641cbuild(deps): bump github.com/pulumi/pulumi/sdk/v3 from 3.235.0 to 3.236.0 in ...d93f8f7build(deps): bump cloud.google.com/go/kms from 1.30.0 to 1.31.0 (#1263)f5fe2e9build(deps): bump golang.org/x/net from v0.52.0 to v0.53.0 (#1269)718735cdocs(authentication): note OpenSSL 3.x requirement for Ed25519 (#1253)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.