build(deps): update go-github

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/go-github/v85	v85.0.0 → v89.0.0
github.com/palantir/go-githubapp	v0.44.0 → v0.45.0

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

google/go-github (github.com/google/go-github/v85)

v89.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Pass DeploymentRequest and DeploymentStatusRequest by value (#​4361)
  BREAKING CHANGE: CreateDeployment and CreateDeploymentStatus now take DeploymentRequest and DeploymentStatusRequest by value; DeploymentRequest.Ref and DeploymentStatusRequest.State are now string, and DeploymentRequest.RequiredContexts is now []string.
• refactor!: Pass HookConfig by value and rename EditHookConfiguration to UpdateHookConfiguration (#​4360)
  BREAKING CHANGE: EditHookConfiguration is renamed to UpdateHookConfiguration on RepositoriesService and OrganizationsService; these methods and AppsService.UpdateHookConfig now take HookConfig by value.
• refactor!: Pass OIDCSubjectClaimCustomTemplate by value in the OIDC subject-claim Set methods (#​4340)
  BREAKING CHANGE: SetOrgOIDCSubjectClaimCustomTemplate and SetRepoOIDCSubjectClaimCustomTemplate now take their body params by value.
• feat!: Refactor actions variables to pass request by value (#​4346)
  BREAKING CHANGE: ActionsService methods involving variables have new params and return values.
• feat!: Replace actions env secret endpoints (#​4335)
  BREAKING CHANGE: ActionsService methods involving secrets have new params and return values.
• refactor!: Pass CreateJITConfigRequest by value and rename Generate*JITConfig to Create*JITConfig (#​4337)
  BREAKING CHANGE: the JIT config methods are renamed from Generate*JITConfig to Create*JITConfig, and they now take CreateJITConfigRequest (renamed from GenerateJITConfigRequest) by value instead of by pointer.
• refactor!: Pass release-notes and asset params by value and rename EditReleaseAsset to UpdateReleaseAsset (#​4336)
  BREAKING CHANGE: GenerateReleaseNotes now takes GenerateNotesRequest by value (renamed from GenerateNotesOptions); EditReleaseAsset is renamed to UpdateReleaseAsset and takes UpdateReleaseAssetRequest by value.
• refactor!: Pass release params by value and rename EditRelease to UpdateRelease (#​4329)
  BREAKING CHANGE: CreateRelease & UpdateRelease now take RepositoryRelease by value; EditRelease is renamed to UpdateRelease.
• refactor!: Pass GistsService required params by value (#​4320)
  BREAKING CHANGE: GistsService methods now pass required params by-value instead of by-ref.
• fix!: Send request body in SCIM update methods (#​4315)
  BREAKING CHANGE: UpdateProvisionedOrgMembership and UpdateAttributeForSCIMUser params and return values changed.
• fix!: Fix LicenseStatus response and Supportkey type (#​4297)
  BREAKING CHANGE: LicenseStatus.SupportKey type changed from *string to *bool and License return type is no longer a slice.
• fix!: Enterprise App installation repos options structs (#​4298)
  BREAKING CHANGE: SelectedRepositoryIDs []int64 is now Repositories []string in *AppInstallationRepositoriesOptions.

...and the following additional changes:

• chore: Bump version of go-github to v89.0.0 (#​4369)
• feat: Add user team membership fields (#​4347)
• chore: Add deprecated flag for unused metadata (#​4367)
• docs: Add AGENTS.md and review-feedback tip (#​4368)
• chore: Mark removed billing endpoints as deprecated (#​4362)
• chore: Validate metadata (#​4358)
• chore: Bump golang.org/x/tools to v0.47.0 (#​4357)
• build(deps): Bump actions/setup-go from 6.4.0 to 6.5.0 in the actions group (#​4349)
• build(deps): Bump the go_modules group in /example (#​4345)
• feat: Add AccessSource to Team (#​4344)
• docs: Update CONTRIBUTING.md (#​4341)
• build(deps): Bump golangci/golangci-lint-action from 9.2.1 to 9.3.0 (#​4342)
• docs: Extend CONTRIBUTING.md with code guidelines (#​4339)
• fix: AuditEntry fields org and org_id can be an array (#​4333)
• build(deps): Bump actions/checkout from 6.0.3 to 7.0.0 in the actions group (#​4332)
• feat: Add code quality findings support (#​4330)
• chore: Update openapi_operations.yaml (#​4331)
• chore: Replace time.Date with referenceTime (#​4325)
• test: Refactor tests for ProjectV2Item.UnmarshalJSON (#​4323)
• chore: Remove obsolete test/fields utility (#​4322)
• feat: Add Issue Dependencies API support (#​4130)
• fix: Set GetBody on uploads for HTTP/2 retry (#​4318)
• chore: Remove deleted account from REVIEWERS (#​4317)
• build(deps): Bump golang.org/x/crypto from 0.52.0 to 0.53.0 in /example (#​4305)
• build(deps): Bump codecov/codecov-action from 6.0.1 to 7.0.0 (#​4303)
• build(deps): Bump golang.org/x/net from 0.55.0 to 0.56.0 in /scrape (#​4302)
• build(deps): Bump golang.org/x/term from 0.43.0 to 0.44.0 in /example (#​4304)
• build(deps): Bump golang.org/x/tools from 0.45.0 to 0.46.0 in /tools (#​4314)
• build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.18.0 to 2.19.0 in /example (#​4306)
• refactor: Fix parameters in method endpoints (#​4300)
• feat: Add enterprise billing usage endpoints and response types (#​4288)
• build(deps): Bump golang.org/x/sync from 0.20.0 to 0.21.0 in /tools (#​4294)
• build(deps): Bump github.com/getkin/kin-openapi from 0.139.0 to 0.140.0 in /tools (#​4295)
• build(deps): Bump actions/checkout from 6.0.2 to 6.0.3 in the actions group (#​4293)
• fix: Reject URL path segments containing percent-encoded dots (#​4291)
• fix: Comparison of durations in AbuseRateLimitError.Is (#​4292)
• test: Replace &x variables with inline Ptr(value) calls (#​4289)
• feat: Inject OpenAPI deprecations safely (#​4286)
• chore: Remove 'munlicode' from REVIEWERS (#​4287)
• feat: Add GetOrgAICreditUsage and GetUserAICreditUsage endpoints (#​4282)
• test: Fix test names and error messages (#​4284)
• test: Use testJSONBody helper for request body assertions (#​4283)
• feat: Add pull request fields to Repository (#​4268)
• build(deps): Bump golangci/golangci-lint-action from 9.2.0 to 9.2.1 (#​4272)
• build(deps): Bump go.opentelemetry.io/otel to v1.44.0 (#​4280)
• build(deps): Bump golang.org/x/net from 0.54.0 to 0.55.0 in /scrape (#​4271)
• build(deps): Bump golang.org/x/crypto from 0.51.0 to 0.52.0 in /example (#​4273)
• fix: Handle missing reviewer type in RequiredReviewer unmarshal (#​4270)
• test: Remove redundant Marshal tests (#​4266)
• chore: Update openapi_operations.yaml (#​4265)
• feat: Add support for GitHub Code Quality API (#​4260)
• build(deps): Bump github.com/getkin/kin-openapi from 0.138.0 to 0.139.0 in /tools (#​4261)
• chore: Fix zizmor security issues in GHA workflows (#​4259)
• feat: Add support for getting Copilot cloud agent configuration (#​4241)
• feat: Add client API version support (#​4246)
• test: Add secret scanning marshal tests (#​4252)
• lint: Improve extraneousnew linter to catch unnecessary use of value var (#​4249)
• build(deps): Bump codecov/codecov-action from 6.0.0 to 6.0.1 (#​4248)
• chore: Bump go-github from v87 to v88 in /scrape (#​4247)

v88.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change app installation Find* methods to Get* (#​4243)
  BREAKING CHANGE: App installation methods are renamed from Find* to Get*.

...and the following additional changes:

• chore: Bump version of go-github to v88.0.0 (#​4245)
• chore: Update openapi_operations.yaml (#​4242)
• feat: Add support for setting client URLs (#​4240)
• refactor: Add constants for API versions (#​4236)
• docs: Formatting and punctuation changes (#​4235)
• feat: Add GetParentIssue for sub-issues (#​4232)
• chore: Bump go-github from v86 to v87 in /scrape (#​4234)

v87.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change GetConsumedLicenses to ListConsumedLicenses (#​4226)
  BREAKING CHANGE: EnterpriseService.GetConsumedLicenses is now EnterpriseService.ListConsumedLicenses.
• refactor!: Change GetAllRepositoryRulesets to ListAllRepositoryRulesets (#​4227)
  BREAKING CHANGE: OrganizationsService.GetAllRepositoryRulesets is now OrganizationsService.ListAllRepositoryRulesets.
• refactor!: Change GetRulesForBranch to ListRulesForBranch (#​4229)
  BREAKING CHANGE: RepositoriesService.GetRulesForBranch is now RepositoriesService.ListRulesForBranch.
• feat!: Refactor client constructor to use options pattern (#​4201)
  BREAKING CHANGE: Clients are now constructed with a nicer builder pattern. See docs for details.
• fix!: Align IssueFieldValues with schema (#​4207)
  BREAKING CHANGE: IssueRequest.IssueFieldValues type is changed.

...and the following additional changes:

• chore: Bump version of go-github to v87.0.0 (#​4233)
• feat: Add enterprise app installation lookup (#​4230)
• chore: Update openapi_operations.yaml (#​4228)
• fix: Use value receiver for MarshalJSON (#​4211)
• chore: Update dependencies (#​4224)
• fix: Close httptest server to prevent test flakiness (#​4210)
• feat: Add two new fields to org CodeSecurityConfiguration (#​4205)
• chore: Bump golangci-lint to v2.12.2 (#​4206)
• build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 in /example (#​4203)
• fix: Limit HTTP error response body reads to prevent OOM (#​4191)
• feat: Add issue field values support for write and read (#​4200)
• chore: Bump go-github from v85 to v86 in /scrape (#​4199)

v86.0.0

Compare Source

This release contains the following breaking API changes:

• feat!: Refactor request context (#​4151)
  BREAKING CHANGE: All internal calls now provide Context via the Request itself.
• feat!: Add OIDC authentication support to PrivateRegistries (#​4159)
  BREAKING CHANGE: PrivateRegistriesService is updated to API version 2026-03-10 with struct and response changes.

...and the following additional changes:

• chore: Bump version of go-github to v86.0.0 (#​4198)
• test: Fix invalid JSON payloads in actions workflow runs tests (#​4197)
• feat: Add repo download contents sentinel errors (#​4192)
• chore: Fix otel module name (#​4187)
• feat: Add typed Copilot metrics download helpers (#​4177)
• feat: Add deploy_keys_enabled_for_repositories and secret scanning custom link fields to Organization struct (#​4188)
• refactor: Use testJSONBody helper for request body assertions in tests (#​4183)
• build(deps): Bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 in /tools (#​4184)
• fix: Include RetryAfter in AbuseRateLimitError.Error output (#​4181)
• fix: Handle string-typed reviewer ID in Ruleset API responses (#​4178)
• feat: Add ArchivedAt field to Organization struct (#​4179)
• feat: Add Copilot coding agent and content exclusion org endpoints (#​4176)
• chore: Bump go-github from v84 to v85 in /scrape (#​4174)

palantir/go-githubapp (github.com/palantir/go-githubapp)

v0.45.0

Compare Source

💥 Breaks

• Update google/go-github to v88

💡 Improvements

• Replace usage of github.com/pkg/errors with standard library equivalents (#​543)

Full Changelog: v0.44.0...v0.45.0

---

Configuration

📅 Schedule: (in timezone Asia/Shanghai)

• Branch creation
  • On day 3 of the month (* * 3 * *)
• Automerge
  • On day 4, 5, 6, 7, and 8 of the month (* * 4,5,6,7,8 * *)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

• 1 additional dependency was updated

Details:

Package	Change
github.com/mattn/go-colorable	v0.1.14 -> v0.1.15