fix(deps): update module github.com/google/go-github/v83 to v89

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/go-github/v83	v83.0.0 → v89.0.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/go-github (github.com/google/go-github/v83)

v89.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Pass DeploymentRequest and DeploymentStatusRequest by value (#​4361)
  BREAKING CHANGE: CreateDeployment and CreateDeploymentStatus now take DeploymentRequest and DeploymentStatusRequest by value; DeploymentRequest.Ref and DeploymentStatusRequest.State are now string, and DeploymentRequest.RequiredContexts is now []string.
• refactor!: Pass HookConfig by value and rename EditHookConfiguration to UpdateHookConfiguration (#​4360)
  BREAKING CHANGE: EditHookConfiguration is renamed to UpdateHookConfiguration on RepositoriesService and OrganizationsService; these methods and AppsService.UpdateHookConfig now take HookConfig by value.
• refactor!: Pass OIDCSubjectClaimCustomTemplate by value in the OIDC subject-claim Set methods (#​4340)
  BREAKING CHANGE: SetOrgOIDCSubjectClaimCustomTemplate and SetRepoOIDCSubjectClaimCustomTemplate now take their body params by value.
• feat!: Refactor actions variables to pass request by value (#​4346)
  BREAKING CHANGE: ActionsService methods involving variables have new params and return values.
• feat!: Replace actions env secret endpoints (#​4335)
  BREAKING CHANGE: ActionsService methods involving secrets have new params and return values.
• refactor!: Pass CreateJITConfigRequest by value and rename Generate*JITConfig to Create*JITConfig (#​4337)
  BREAKING CHANGE: the JIT config methods are renamed from Generate*JITConfig to Create*JITConfig, and they now take CreateJITConfigRequest (renamed from GenerateJITConfigRequest) by value instead of by pointer.
• refactor!: Pass release-notes and asset params by value and rename EditReleaseAsset to UpdateReleaseAsset (#​4336)
  BREAKING CHANGE: GenerateReleaseNotes now takes GenerateNotesRequest by value (renamed from GenerateNotesOptions); EditReleaseAsset is renamed to UpdateReleaseAsset and takes UpdateReleaseAssetRequest by value.
• refactor!: Pass release params by value and rename EditRelease to UpdateRelease (#​4329)
  BREAKING CHANGE: CreateRelease & UpdateRelease now take RepositoryRelease by value; EditRelease is renamed to UpdateRelease.
• refactor!: Pass GistsService required params by value (#​4320)
  BREAKING CHANGE: GistsService methods now pass required params by-value instead of by-ref.
• fix!: Send request body in SCIM update methods (#​4315)
  BREAKING CHANGE: UpdateProvisionedOrgMembership and UpdateAttributeForSCIMUser params and return values changed.
• fix!: Fix LicenseStatus response and Supportkey type (#​4297)
  BREAKING CHANGE: LicenseStatus.SupportKey type changed from *string to *bool and License return type is no longer a slice.
• fix!: Enterprise App installation repos options structs (#​4298)
  BREAKING CHANGE: SelectedRepositoryIDs []int64 is now Repositories []string in *AppInstallationRepositoriesOptions.

...and the following additional changes:

• chore: Bump version of go-github to v89.0.0 (#​4369)
• feat: Add user team membership fields (#​4347)
• chore: Add deprecated flag for unused metadata (#​4367)
• docs: Add AGENTS.md and review-feedback tip (#​4368)
• chore: Mark removed billing endpoints as deprecated (#​4362)
• chore: Validate metadata (#​4358)
• chore: Bump golang.org/x/tools to v0.47.0 (#​4357)
• build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 in the actions group (#​4349)
• build(deps): Bump the go_modules group in /example (#​4345)
• feat: Add AccessSource to Team (#​4344)
• docs: Update CONTRIBUTING.md (#​4341)
• build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#​4342)
• docs: Extend CONTRIBUTING.md with code guidelines (#​4339)
• fix: AuditEntry fields org and org_id can be an array (#​4333)
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the actions group (#​4332)
• feat: Add code quality findings support (#​4330)
• chore: Update openapi_operations.yaml (#​4331)
• chore: Replace time.Date with referenceTime (#​4325)
• test: Refactor tests for ProjectV2Item.UnmarshalJSON (#​4323)
• chore: Remove obsolete test/fields utility (#​4322)
• feat: Add Issue Dependencies API support (#​4130)
• fix: Set GetBody on uploads for HTTP/2 retry (#​4318)
• chore: Remove deleted account from REVIEWERS (#​4317)
• build(deps): Bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /example (#​4305)
• build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0 (#​4303)
• build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in /scrape (#​4302)
• build(deps): Bump golang.org/x/term from 0.43.0 to 0.44.0 in /example (#​4304)
• build(deps): Bump golang.org/x/tools from 0.45.0 to 0.46.0 in /tools (#​4314)
• build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 in /example (#​4306)
• refactor: Fix parameters in method endpoints (#​4300)
• feat: Add enterprise billing usage endpoints and response types (#​4288)
• build(deps): Bump golang.org/x/sync from 0.20.0 to 0.21.0 in /tools (#​4294)
• build(deps): Bump github.com/getkin/kin-openapi from 0.139.0 to 0.140.0 in /tools (#​4295)
• build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 in the actions group (#​4293)
• fix: Reject URL path segments containing percent-encoded dots (#​4291)
• fix: Comparison of durations in AbuseRateLimitError.Is (#​4292)
• test: Replace &x variables with inline Ptr(value) calls (#​4289)
• feat: Inject OpenAPI deprecations safely (#​4286)
• chore: Remove 'munlicode' from REVIEWERS (#​4287)
• feat: Add GetOrgAICreditUsage and GetUserAICreditUsage endpoints (#​4282)
• test: Fix test names and error messages (#​4284)
• test: Use testJSONBody helper for request body assertions (#​4283)
• feat: Add pull request fields to Repository (#​4268)
• build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#​4272)
• build(deps): Bump go.opentelemetry.io/otel to v1.44.0 (#​4280)
• build(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0 in /scrape (#​4271)
• build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /example (#​4273)
• fix: Handle missing reviewer type in RequiredReviewer unmarshal (#​4270)
• test: Remove redundant Marshal tests (#​4266)
• chore: Update openapi_operations.yaml (#​4265)
• feat: Add support for GitHub Code Quality API (#​4260)
• build(deps): Bump github.com/getkin/kin-openapi from 0.138.0 to 0.139.0 in /tools (#​4261)
• chore: Fix zizmor security issues in GHA workflows (#​4259)
• feat: Add support for getting Copilot cloud agent configuration (#​4241)
• feat: Add client API version support (#​4246)
• test: Add secret scanning marshal tests (#​4252)
• lint: Improve extraneousnew linter to catch unnecessary use of value var (#​4249)
• build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1 (#​4248)
• chore: Bump go-github from v87 to v88 in /scrape (#​4247)

v88.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change app installation Find* methods to Get* (#​4243)
  BREAKING CHANGE: App installation methods are renamed from Find* to Get*.

...and the following additional changes:

• chore: Bump version of go-github to v88.0.0 (#​4245)
• chore: Update openapi_operations.yaml (#​4242)
• feat: Add support for setting client URLs (#​4240)
• refactor: Add constants for API versions (#​4236)
• docs: Formatting and punctuation changes (#​4235)
• feat: Add GetParentIssue for sub-issues (#​4232)
• chore: Bump go-github from v86 to v87 in /scrape (#​4234)

v87.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change GetConsumedLicenses to ListConsumedLicenses (#​4226)
  BREAKING CHANGE: EnterpriseService.GetConsumedLicenses is now EnterpriseService.ListConsumedLicenses.
• refactor!: Change GetAllRepositoryRulesets to ListAllRepositoryRulesets (#​4227)
  BREAKING CHANGE: OrganizationsService.GetAllRepositoryRulesets is now OrganizationsService.ListAllRepositoryRulesets.
• refactor!: Change GetRulesForBranch to ListRulesForBranch (#​4229)
  BREAKING CHANGE: RepositoriesService.GetRulesForBranch is now RepositoriesService.ListRulesForBranch.
• feat!: Refactor client constructor to use options pattern (#​4201)
  BREAKING CHANGE: Clients are now constructed with a nicer builder pattern. See docs for details.
• fix!: Align IssueFieldValues with schema (#​4207)
  BREAKING CHANGE: IssueRequest.IssueFieldValues type is changed.

...and the following additional changes:

• chore: Bump version of go-github to v87.0.0 (#​4233)
• feat: Add enterprise app installation lookup (#​4230)
• chore: Update openapi_operations.yaml (#​4228)
• fix: Use value receiver for MarshalJSON (#​4211)
• chore: Update dependencies (#​4224)
• fix: Close httptest server to prevent test flakiness (#​4210)
• feat: Add two new fields to org CodeSecurityConfiguration (#​4205)
• chore: Bump golangci-lint to v2.12.2 (#​4206)
• build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 in /example (#​4203)
• fix: Limit HTTP error response body reads to prevent OOM (#​4191)
• feat: Add issue field values support for write and read (#​4200)
• chore: Bump go-github from v85 to v86 in /scrape (#​4199)

v86.0.0

Compare Source

This release contains the following breaking API changes:

• feat!: Refactor request context (#​4151)
  BREAKING CHANGE: All internal calls now provide Context via the Request itself.
• feat!: Add OIDC authentication support to PrivateRegistries (#​4159)
  BREAKING CHANGE: PrivateRegistriesService is updated to API version 2026-03-10 with struct and response changes.

...and the following additional changes:

• chore: Bump version of go-github to v86.0.0 (#​4198)
• test: Fix invalid JSON payloads in actions workflow runs tests (#​4197)
• feat: Add repo download contents sentinel errors (#​4192)
• chore: Fix otel module name (#​4187)
• feat: Add typed Copilot metrics download helpers (#​4177)
• feat: Add deploy_keys_enabled_for_repositories and secret scanning custom link fields to Organization struct (#​4188)
• refactor: Use testJSONBody helper for request body assertions in tests (#​4183)
• build(deps): Bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 in /tools (#​4184)
• fix: Include RetryAfter in AbuseRateLimitError.Error output (#​4181)
• fix: Handle string-typed reviewer ID in Ruleset API responses (#​4178)
• feat: Add ArchivedAt field to Organization struct (#​4179)
• feat: Add Copilot coding agent and content exclusion org endpoints (#​4176)
• chore: Bump go-github from v84 to v85 in /scrape (#​4174)

v85.0.0

Compare Source

This release contains the following breaking API changes:

• fix!: Resolve inconsistent options for create and update on custom org role (#​4075)
  BREAKING CHANGE: GetOrgRole, CreateCustomOrgRole, and UpdateCustomOrgRole have new params and return values.
• fix!: Change id from int64 to string in ActivityService.MarkThreadDone (#​4056)
  BREAKING CHANGE: ActivityService.MarkThreadDone accepts string id instead of int64.

...and the following additional changes:

• chore: Bump version of go-github to v85.0.0 (#​4173)
• chore: Update openapi_operations.yaml (#​4172)
• security: Reject cross-host redirects to prevent Authorization leak (#​4171)
• chore: Improve GitHub Actions workflows lint and testing (#​4169)
• chore: Switch legacy redirect handling to new pattern (#​4161)
• feat: Add CodeSecurity to SecurityAndAnalysis (#​4155)
• fix: Reject URL path segments containing ".." in all request methods (#​4150)
• feat: Refactor repositories download contents (#​4153)
• chore: Bump google.org/x/tools to v0.44.0 in /tools (#​4168)
• docs: Fix broken blog post link (#​4160)
• build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 in /example (#​4156)
• chore: Update openapi_operations.yaml (#​4157)
• feat: Remove Google App Engine standard support (#​4152)
• feat: Add DownloadCopilotMetrics helper method (#​4149)
• docs: Add apiVersion to GitHub API link (#​4147)
• chore: Simplify redundantptr custom linter (#​4148)
• docs: Deprecate old Copilot metrics endpoints closed on April 2, 2026 (#​4137)
• refactor: Remove redundant github.Ptr calls (#​4145)
• fix: Add missing User fields (#​4146)
• fix: Preserve Marketplace.Stubbed during client copy (#​4144)
• refactor: Simplify array copying (#​4143)
• build(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 in /example (#​4141)
• build(deps): Bump github.com/getkin/kin-openapi from 0.134.0 to 0.135.0 in /tools (#​4142)
• build(deps): Bump golang.org/x/term from 0.41.0 to 0.42.0 in /example (#​4140)
• build(deps): Bump golang.org/x/net from 0.52.0 to 0.53.0 in /scrape (#​4139)
• build(deps): Bump go.opentelemetry.io/otel to v1.43.0 (#​4135)
• fix: Expand sanitizeURL secrets redactions (#​4126)
• build(deps): Bump github.com/alecthomas/kong from 1.14.0 to 1.15.0 in /tools (#​4132)
• build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#​4131)
• feat: Add support for custom names and methods that return structs with multiple []*T fields in gen-iterators.go (#​4128)
• fix: Limit webhook payload size in ValidatePayloadFromBody (#​4125)
• build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 (#​4123)
• fix: Synchronize requestCount in rate limit tests (#​4124)
• chore: Simplify generate.sh by removing git worktree and using generator-based check (#​4120)
• docs: Improve comments in /examples (#​4122)
• chore: Use golangci-lint-action; remove newreposecretwithlibsodium (#​4119)
• feat: Add custom image endpoints for GitHub-hosted runners (#​4101)
• chore: Cache custom golangci-lint binaries in GHA workflow (#​4116)
• build(deps): Bump github.com/ProtonMail/go-crypto from 1.4.0 to 1.4.1 in /example (#​4115)
• build(deps): Bump golang.org/x/tools from 0.29.0 to 0.43.0 in /tools/extraneous-new (#​4114)
• build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#​4112)
• build(deps): Bump github.com/golangci/plugin-module-register from 0.1.1 to 0.1.2 in /tools/extraneous-new (#​4113)
• build(deps): Bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 in /tools (#​4111)
• build(deps): Bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 in /scrape (#​4110)
• chore: Upgrade deps for linters using dependabot (#​4107)
• chore: Use structfield.Settings in check-structfield-settings (#​4108)
• build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in /example (#​4109)
• chore: Remove unnecessary use of new and &SomeStruct{} and add new extraneousnew custom linter (#​4106)
• feat: Add NetworkConfigurationID and HostedRunnersURL to enterprise runner group types (#​4099)
• feat: Generate accessors for all fields (#​4105)
• feat: Add ListRunnerGroupHostedRunners for org runner groups (#​4100)
• chore: Enable default: none linters; remove duplicated (#​4097)
• fix: Use Cursor pagination for *.ListHookDeliveriesIter (#​4096)
• chore: Remove duplicated formatters (#​4094)
• chore: Fix typos in comments and tests (#​4093)
• chore: Fix typo in CONTRIBUTING.md (#​4092)
• chore: Update openapi_operations.yaml (#​4091)
• build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 in /example (#​4084)
• chore: Bump go.opentelemetry.io/otel to v1.42.0 (#​4090)
• build(deps): Bump golang.org/x/crypto from 0.48.0 to 0.49.0 in /example (#​4081)
• build(deps): Bump golang.org/x/sync from 0.19.0 to 0.20.0 in /tools (#​4078)
• build(deps): Bump golang.org/x/net from 0.51.0 to 0.52.0 in /scrape (#​4079)
• test: Add fuzz test for ParseWebHook (#​4076)
• feat: Add enterprise budgets API (#​4069)
• feat: Add list organization fine-grained permissions (#​4072)
• feat: Make script/lint.sh output simpler to read (#​4073)
• chore: Speed up linting (#​4071)
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /otel (#​4065)
• build(deps): Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /otel (#​4068)
• build(deps): Bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.40.0 to 1.41.0 in /example (#​4062)
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /example (#​4064)
• build(deps): Bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0 in /example (#​4063)
• feat: Add client_id field to App (#​4060)
• test: Simplify CopilotService tests (#​4058)
• test: Fix flaky TestDo_rateLimit_abuseRateLimitError_xRateLimitReset (#​4057)
• feat: Add support for enterprise audit log streaming API (#​4035)
• feat: Add repository-level immutable releases settings (#​4039)
• chore: Add SAS as a common initialism to structfield (#​4054)
• fix: Fix data race on Windows (#​4051)
• docs: Fix grammar in README.md (#​4053)
• chore: Simplify form value assertions in tests (#​4048)
• chore: Bump go-github from v83 to v84 in /scrape (#​4050)

v84.0.0

Compare Source

This release contains the following breaking API changes:

• feat!: Support workflow dispatch run details in response (#​4028)
  BREAKING CHANGE: CreateWorkflowDispatchEventByID and CreateWorkflowDispatchEventByFileName now return *WorkflowDispatchRunDetails.
• fix!: Fix opts for methods listing issues and sub-issues (#​4016)
  BREAKING CHANGE: Split IssuesService.List into IssuesService.ListAllIssues and IssuesService.ListUserIssues. IssuesService.ListByOrg now accepts IssueListByOrgOptions. SubIssueService.ListByIssue now accepts ListOptions.

...and the following additional changes:

• chore: Bump version of go-github to v84.0.0 (#​4049)
• chore: Spell white space instead of whitespace (#​4047)
• build(deps): Bump the go_modules group in /example (#​4040)
• chore: Improve testJSONMarshal (#​4042)
• Add 'munlicode' to REVIEWERS list (#​4046)
• build(deps): Bump golang.org/x/net from 0.50.0 to 0.51.0 in /scrape (#​4045)
• build(deps): Bump actions/setup-go from 6.2.0 to 6.3.0 in the actions group (#​4044)
• chore: Fix TestNewFormRequest (#​4043)
• feat: Add support for team type field (#​4037)
• chore: Update openapi_operations.yaml (#​4041)
• feat: Add support for repository fine-grained permissions (#​4032)
• docs: Fix documentation links (#​4036)
• feat: Add fields Codespaces, Copilot and ActionsInbound to APIMeta (#​3975)
• chore: Use go:fix inline for deprecated ptr funcs (#​4034)
• feat: Add ListFineGrainedPersonalAccessTokenRequests for org (#​4022)
• feat: Ensure compatibility with encoding/json/v2 experiment (#​4029)
• chore: Update golangci-lint and enable some revive rules (#​4025)
• refactor: Use sorting functions from slices instead of sort (#​4020)
• build(deps): Bump github.com/theupdateframework/go-tuf/v2 to v2.4.1 (#​4018)
• chore: Update workflow and tools to use Go 1.26 and 1.25 (#​3995)
• chore: Bump go-github from v82 to v83 in /scrape (#​4017)

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[ti-chi-bot]

[APPROVALNOTIFIER] This PR is NOT APPROVED

This pull-request has been approved by:
Once this PR has been reviewed and has the lgtm label, please assign wuhuizuo for approval. For more information see the Code Review Process.
Please ensure that each of them provides their approval before proceeding.

The full list of commands accepted by this bot can be found here.

Details

Needs approval from an approver in each of these files:

• OWNERS

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

[ti-chi-bot]

Hi @renovate[bot]. Thanks for your PR.

I'm waiting for a PingCAP-QE member to verify that this patch is reasonable to test. If it is, they should reply with /ok-to-test on its own line. Until that is done, I will not automatically test new commits in this PR, but the usual testing commands by org members will still work. Regular contributors should join the org to skip this step.

Once the patch is verified, the new status will be reflected by the ok-to-test label.

I understand the commands that are listed here.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.