[dependabot]

Bumps the all group with 5 updates:

Package	From	To
github.com/Azure/azure-sdk-for-go/sdk/azidentity	1.14.1	1.15.0
github.com/anthropics/anthropic-sdk-go	1.80.0	1.82.0
github.com/github/copilot-sdk/go	1.0.19	1.0.22
github.com/openai/openai-go/v3	3.77.0	3.78.0
google.golang.org/genai	1.74.0	1.75.0

Updates github.com/Azure/azure-sdk-for-go/sdk/azidentity from 1.14.1 to 1.15.0

Release notes

Sourced from github.com/Azure/azure-sdk-for-go/sdk/azidentity's releases.

sdk/azidentity/v1.15.0

1.15.0 (2026-10-14)

Features Added

• ManagedIdentityCredential and DefaultAzureCredential support user-assigned managed identities on Azure Arc when the agent supports them
• WorkloadIdentityCredential supports identity binding mode via WorkloadIdentityCredentialOptions.EnableAzureProxy

Bugs Fixed

• ManagedIdentityCredential verifies the Service Fabric endpoint's certificate against IDENTITY_SERVER_THUMBPRINT and rejects redirects

Other Changes

• On Service Fabric, a custom ClientOptions.Transport must be an *http.Client with a nil Transport or a standard *http.Transport without custom TLS dialing or verification callbacks. Unsupported transports now cause credential construction to fail
• Upgraded dependencies

Commits

• bb7200c Update azcore v1.15.0 release date (#23569)
• d112082 [azopenaiextensions] Pushing release date to Monday (#23565)
• 9522165 [azopenai] 2024-08-01-preview generation (#23554)
• 42922c1 [azeventhubs,azservicebus] Applying retry fix to both eventhubs and servicebu...
• 5df372c Use common OIDC token env vars in post scripts (#23549)
• 1c2a108 BearerTokenPolicy handles CAE claims challenges by default (#23414)
• 8759ee6 [azopenaiextensions] Prepping for release tomorrow (#23551)
• a230ef2 [Search] Remove myself from CODEOWNERS (#23560)
• a743757 Sync eng/common directory with azure-sdk-tools for PR 9106 (#23555)
• 7c2d3a7 Use equality function check for persist oidc token step (#23559)
• Additional commits viewable in compare view

Updates github.com/anthropics/anthropic-sdk-go from 1.80.0 to 1.82.0

Release notes

Sourced from github.com/anthropics/anthropic-sdk-go's releases.

v1.82.0

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Chores

• ci: speed up breaking change detection
• docs: describe headers on Managed Agents and telemetry endpoints
• tests: add tests for custom HTTP clients and trace propagation

Documentation

• api: note that some models need a beta header to use speed

v1.81.0

Features

• api: add execution_identity to Managed Agents agents

• api: add organization_type_not_supported error to spend limit lists

• api: add telemetry destination test endpoint

• api: add telemetry destinations to the Admin API

• client: add native support for OpenTelemetry tracing

  If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass option.WithoutOpenTelemetry() to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

• api: rename telemetry destination test response model
• client: return a constant's value from a param union's getter
• client: skip comment-only blocks when decoding event streams
• client: treat proxy-authorization as a sensitive header
• set the required type field in union param constructor helpers

Chores

• docs: correct prefill, thinking, fallback and model descriptions
• docs: document the scope required to assign the managed role
• docs: update model examples
• internal: narrow the tripwire test rule in the contributor guides
• tests: stop listing the stream event types in the accumulator test

Documentation

... (truncated)

Changelog

Sourced from github.com/anthropics/anthropic-sdk-go's changelog.

1.82.0 (2026-10-15)

Features

• api: add between_tools to thinking types in model capabilities
• api: add the speed parameter and usage.speed to Messages
• api: return a Console organization's usage-tier spend cap as a read-only spend limit

Chores

• ci: speed up breaking change detection
• docs: describe headers on Managed Agents and telemetry endpoints
• tests: add tests for custom HTTP clients and trace propagation

Documentation

• api: note that some models need a beta header to use speed

1.81.0 (2026-10-14)

Features

• api: add execution_identity to Managed Agents agents

• api: add organization_type_not_supported error to spend limit lists

• api: add telemetry destination test endpoint

• api: add telemetry destinations to the Admin API

• client: add native support for OpenTelemetry tracing

  If your app registers a global tracer provider, the SDK will create spans with it after upgrading, and they'll be exported with the rest of your traces. Requests will also get trace context headers from the global propagator. To disable, pass option.WithoutOpenTelemetry() to the client or set ANTHROPIC_OPEN_TELEMETRY=false. Learn more in the documentation.

Bug Fixes

• api: rename telemetry destination test response model
• client: return a constant's value from a param union's getter
• client: skip comment-only blocks when decoding event streams
• client: treat proxy-authorization as a sensitive header
• set the required type field in union param constructor helpers

Chores

• docs: correct prefill, thinking, fallback and model descriptions
• docs: document the scope required to assign the managed role
• docs: update model examples
• internal: narrow the tripwire test rule in the contributor guides
• tests: stop listing the stream event types in the accumulator test

... (truncated)

Commits

• 543d266 release: 1.82.0
• 7553b5f Merge pull request #473 from anthropics/synced/published
• b748883 feat(helpers): retry a rate-limited fast fallback at standard speed (#479)
• c98d162 chore(tests): add tests for custom HTTP clients and trace propagation
• 4e8df93 feat(api): add between_tools to thinking types in model capabilities
• 9edba44 chore(docs): describe headers on Managed Agents and telemetry endpoints
• 2397ac4 docs(api): note that some models need a beta header to use speed
• 9b51bcb docs(changelog): shorten the OpenTelemetry tracing note (#478)
• 907de5f feat(api): add the speed parameter and usage.speed to Messages
• b7fd9bc codegen metadata
• Additional commits viewable in compare view

Updates github.com/github/copilot-sdk/go from 1.0.19 to 1.0.22

Release notes

Sourced from github.com/github/copilot-sdk/go's releases.

v1.0.22

Other changes

• improvement: [All SDKs] update bundled Copilot CLI dependency to 1.0.98-2 (no SDK API changes)

Full Changelog: github/copilot-sdk@v1.0.21...v1.0.22

[!WARNING]

The following domain was blocked by the firewall during workflow execution:

• github.com

To allow these domains, add them to the network.allowed list in your workflow frontmatter:

network:
  allowed:
    - defaults
    - "github.com"

See Network Configuration for more information.

Generated by Release Notes Generator · copilot · auto · 18.1 AIC · ⌖ 0.552 AIC · ⊞ 10.5K

v1.0.22-preview.2

Full Changelog: github/copilot-sdk@v1.0.22-preview.1...v1.0.22-preview.2

v1.0.22-preview.1

Full Changelog: github/copilot-sdk@v1.0.22-preview.0...v1.0.22-preview.1

v1.0.22-preview.0

Full Changelog: github/copilot-sdk@v1.0.21...v1.0.22-preview.0

v1.0.21

Other changes

• improvement: [All SDKs] regenerate RPC and session event types against Copilot CLI 1.0.97 (new catalog agent plugin/media type fields and updated session event schemas)
• improvement: [Rust] JSON-RPC and session filesystem dispatch handling refinements
• improvement: [C#] minor update to built-in PermissionHandlers

Full Changelog: github/copilot-sdk@v1.0.19...v1.0.21

... (truncated)

Commits

• ffd25c7 Update SDK snapshot for Copilot CLI 1.0.98
• ad20f9f Update SDK snapshot for Copilot CLI 1.0.98-2
• 810c483 Update SDK snapshot for Copilot CLI 1.0.98-1
• 508247d Update SDK snapshot for Copilot CLI 1.0.98-0
• 9782624 Update SDK snapshot for Copilot CLI 1.0.97-3
• b19d3ef Update SDK snapshot for Copilot CLI 1.0.97-2
• 0a3643f Update SDK snapshot for Copilot CLI 1.0.97-1
• a72e9dd Update SDK snapshot for Copilot CLI 1.0.97-0
• 6be623b Update SDK snapshot for Copilot CLI 1.0.96-2
• 0f7ab2d Update SDK snapshot for Copilot CLI 1.0.96-1
• Additional commits viewable in compare view

Updates github.com/openai/openai-go/v3 from 3.77.0 to 3.78.0

Release notes

Sourced from github.com/openai/openai-go/v3's releases.

v3.78.0

3.78.0 (2026-10-13)

Features

• api: support updating project API key expiry (#1051) (783537a)

Build System

• deps: bump github.com/aws/aws-sdk-go-v2 in / (#1026) (8dfc8f1)
• deps: bump github.com/aws/aws-sdk-go-v2/config in / (#983) (8e06cf4)
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore in / (#1052) (5f94bd8)
• deps: bump openai/codex-action from 1.12 to 1.13 (#1055) (d62dfab)
• deps: bump the codeql group across 1 directory with 2 updates (#984) (432746c)

Changelog

Sourced from github.com/openai/openai-go/v3's changelog.

3.78.0 (2026-10-13)

Features

• api: support updating project API key expiry (#1051) (783537a)

Build System

• deps: bump github.com/aws/aws-sdk-go-v2 in / (#1026) (8dfc8f1)
• deps: bump github.com/aws/aws-sdk-go-v2/config in / (#983) (8e06cf4)
• deps: bump github.com/Azure/azure-sdk-for-go/sdk/azcore in / (#1052) (5f94bd8)
• deps: bump openai/codex-action from 1.12 to 1.13 (#1055) (d62dfab)
• deps: bump the codeql group across 1 directory with 2 updates (#984) (432746c)

Commits

• d78ccb7 release: 3.78.0 (#1054)
• d62dfab build(deps): bump openai/codex-action from 1.12 to 1.13 (#1055)
• 5f94bd8 build(deps): bump github.com/Azure/azure-sdk-for-go/sdk/azcore in / (#1052)
• 8dfc8f1 build(deps): bump github.com/aws/aws-sdk-go-v2 in / (#1026)
• 432746c build(deps): bump the codeql group across 1 directory with 2 updates (#984)
• 8e06cf4 build(deps): bump github.com/aws/aws-sdk-go-v2/config in / (#983)
• 783537a feat(api): support updating project API key expiry (#1051)
• See full diff in compare view

Updates google.golang.org/genai from 1.74.0 to 1.75.0

Release notes

Sourced from google.golang.org/genai's releases.

v1.75.0

1.75.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (f8f7050)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (f0c1430)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (19689a2)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (0828ad4)

Changelog

Sourced from google.golang.org/genai's changelog.

1.75.0 (2026-10-14)

Features

• interactions: add gemini-4-argon to Model enum (f8f7050)

Bug Fixes

• clear continuation state and preserve prompt feedback when continuation hop returns no candidates (f0c1430)
• fix the grounding metadata merging for automatic continuation in generate content and generate content stream (19689a2)
• make continuation streams retry dropped hops, stop on prompt_feedback, and keep real errors in generate_content (0828ad4)

Commits

• eeed5bd chore(main): release 1.75.0 (#996)
• 1b5d867 chore(cli): update Speakeasy OpenAPI generator to v2.948.9
• 5e16354 chore: internal change
• 0828ad4 fix: make continuation streams retry dropped hops, stop on prompt_feedback, a...
• 1fe6925 test: retry transient errors for longer in the nightly integration tests
• 19689a2 fix: fix the grounding metadata merging for automatic continuation in generat...
• f0c1430 fix: clear continuation state and preserve prompt feedback when continuation ...
• f8f7050 feat(interactions): add gemini-4-argon to Model enum
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

[Copilot]

🔵 Needs a closer look

SDK compatibility and upstream authentication and tracing changes remain unverified without CI validation.

No open issues 🎉

What changed in this PR

Updates five SDK dependencies used by Agent Framework Go’s authentication and provider integrations.

Changes:

• Upgrades Azure Identity, Anthropic, GitHub Copilot, OpenAI, and Google GenAI SDKs.
• Updates the indirect authentication dependency and module checksums.

File	Description
go.sum	Refreshes SDK and transitive dependency checksums.
go.mod	Updates five direct SDK versions and the indirect authentication library.

_{Review effort: Balanced}