registry/go.mod
dependabot[bot] 4e1f96a716
build(deps): bump github.com/danielgtaylor/huma/v2 from 2.39.0 to 2.39.1 (#1489)
Bumps
[github.com/danielgtaylor/huma/v2](https://github.com/danielgtaylor/huma)
from 2.39.0 to 2.39.1.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/danielgtaylor/huma/releases">github.com/danielgtaylor/huma/v2's
releases</a>.</em></p>
<blockquote>
<h1>v2.39.1</h1>
<h2>Overview</h2>
<p>A patch release: correctness fixes for resolvers, validation, and
response handling, plus a dependency refresh.</p>
<h3>Response Status Visible to Middleware Again</h3>
<p><code>WithContext</code> context propagation in v2.39.0 copied the
response status by value, so middleware that called
<code>WithContext</code> and then read <code>Status()</code> after
<code>next()</code> always saw <code>0</code> instead of the status the
handler set, breaking access logging and telemetry. The status is now
shared by every context copy across all adapters, restoring the pre-2.39
invariant while keeping context propagation intact. (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1081">#1081</a>)</p>
<h3>Resolvers &amp; Defaults in Arrays and Maps</h3>
<ul>
<li>Nested resolvers now run for fixed-size arrays
(<code>[2]Item</code>), not just slices (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1076">#1076</a>)</li>
<li>A resolver on a named collection type (e.g. <code>type Coords
[2]float64</code>) no longer panics, and is no longer conflated with a
resolver on its element type, which previously ran the element's
resolver twice and the collection's never (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1082">#1082</a>)</li>
<li>Values reached through a map are now written back after being
walked, so applying a default no longer panics with <code>reflect:
reflect.Value.Set using unaddressable value</code> and resolver
mutations are no longer silently discarded (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1082">#1082</a>)</li>
</ul>
<h3>Stricter <code>email</code> and <code>uri</code> Formats</h3>
<p>Validation for two string formats is tighter, so payloads that
previously passed may now return <code>422</code>:</p>
<ul>
<li><code>email</code> / <code>idn-email</code> accept an addr-spec
only; full mailbox forms with a display name (<code>Name
&lt;user@example.com&gt;</code>) are rejected</li>
<li><code>uri</code> / <code>iri</code> require an absolute URI with a
non-empty scheme, while relative references remain valid under
<code>uri-reference</code> / <code>iri-reference</code> (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1068">#1068</a>)</li>
</ul>
<h3>Validation Robustness</h3>
<ul>
<li>An unresolvable schema <code>$ref</code> during
<code>Validate</code> now reports <code>expected schema $ref to resolve:
...</code> instead of panicking on a nil dereference, covering
discriminators and <code>map[string]any</code> /
<code>map[any]any</code> values (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1065">#1065</a>)</li>
<li>Named numeric slice parameters (e.g. <code>type IDs []int64</code>)
are built with their declared element type and validated with item,
length, and uniqueness constraints intact (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1074">#1074</a>)</li>
</ul>
<h2>Other Fixes</h2>
<ul>
<li>Resolver errors that wrap a <code>HeadersError</code> now contribute
their headers to the response, matching the handler error path (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1070">#1070</a>)</li>
<li>A nil interface response body no longer panics in the schema link
transformer (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1072">#1072</a>)</li>
<li>Dependencies updated (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1066">#1066</a>)</li>
</ul>
<h2>What's Changed</h2>
<ul>
<li>fix: do not panic on unresolved schema $ref during Validate by <a
href="https://github.com/baiyuxi930826"><code>@​baiyuxi930826</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1065">danielgtaylor/huma#1065</a></li>
<li>chore: update dependencies by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1066">danielgtaylor/huma#1066</a></li>
<li>fix: tighten format email and uri validation by <a
href="https://github.com/baiyuxi930826"><code>@​baiyuxi930826</code></a>
in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1068">danielgtaylor/huma#1068</a></li>
<li>fix: preserve wrapped resolver error metadata by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1070">danielgtaylor/huma#1070</a></li>
<li>fix: handle nil interface response bodies by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1072">danielgtaylor/huma#1072</a></li>
<li>fix: parse named numeric slice parameters by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1074">danielgtaylor/huma#1074</a></li>
<li>fix: share response status across WithContext copies by <a
href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1081">danielgtaylor/huma#1081</a></li>
<li>fix: run nested resolvers in fixed arrays by <a
href="https://github.com/ggmolly"><code>@​ggmolly</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1076">danielgtaylor/huma#1076</a></li>
<li>fix: distinguish collection and element matches when walking input
by <a href="https://github.com/wolveix"><code>@​wolveix</code></a> in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1082">danielgtaylor/huma#1082</a></li>
</ul>
<h2>New Contributors</h2>
<ul>
<li><a
href="https://github.com/baiyuxi930826"><code>@​baiyuxi930826</code></a>
made their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1065">danielgtaylor/huma#1065</a></li>
<li><a href="https://github.com/ggmolly"><code>@​ggmolly</code></a> made
their first contribution in <a
href="https://redirect.github.com/danielgtaylor/huma/pull/1070">danielgtaylor/huma#1070</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/danielgtaylor/huma/compare/v2.39.0...v2.39.1">https://github.com/danielgtaylor/huma/compare/v2.39.0...v2.39.1</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="198225eaac"><code>198225e</code></a>
fix: distinguish collection and element matches when walking input (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1082">#1082</a>)</li>
<li><a
href="5961f0a01d"><code>5961f0a</code></a>
fix: run nested resolvers in fixed arrays (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1076">#1076</a>)</li>
<li><a
href="85aad8ffbd"><code>85aad8f</code></a>
fix: share response status across WithContext copies (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1081">#1081</a>)</li>
<li><a
href="22a3cb0100"><code>22a3cb0</code></a>
fix: parse named numeric slice parameters (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1074">#1074</a>)</li>
<li><a
href="ac9959c059"><code>ac9959c</code></a>
fix: handle nil interface response bodies (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1072">#1072</a>)</li>
<li><a
href="b659c7472c"><code>b659c74</code></a>
fix: preserve wrapped resolver error metadata (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1070">#1070</a>)</li>
<li><a
href="14aea2fe3d"><code>14aea2f</code></a>
fix: tighten format email and uri validation (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1068">#1068</a>)</li>
<li><a
href="bba0d542c4"><code>bba0d54</code></a>
chore: update dependencies (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1066">#1066</a>)</li>
<li><a
href="e114668342"><code>e114668</code></a>
fix: do not panic on unresolved schema $ref during Validate (<a
href="https://redirect.github.com/danielgtaylor/huma/issues/1065">#1065</a>)</li>
<li>See full diff in <a
href="https://github.com/danielgtaylor/huma/compare/v2.39.0...v2.39.1">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=github.com/danielgtaylor/huma/v2&package-manager=go_modules&previous-version=2.39.0&new-version=2.39.1)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
2026-08-07 01:29:42 +03:00

86 lines
4 KiB
Modula-2

module github.com/modelcontextprotocol/registry
go 1.26
require (
cloud.google.com/go/kms v1.32.0
github.com/Azure/azure-sdk-for-go/sdk/azidentity v1.14.0
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/azkeys v1.5.0
github.com/caarlos0/env/v11 v11.4.1
github.com/coreos/go-oidc/v3 v3.20.0
github.com/danielgtaylor/huma/v2 v2.39.1
github.com/golang-jwt/jwt/v5 v5.3.1
github.com/google/go-containerregistry v0.21.8
github.com/jackc/pgx/v5 v5.10.0
github.com/prometheus/client_golang v1.24.1
github.com/rs/cors v1.11.1
github.com/santhosh-tekuri/jsonschema/v5 v5.3.1
github.com/stretchr/testify v1.11.1
go.opentelemetry.io/contrib/instrumentation/runtime v0.69.0
go.opentelemetry.io/otel v1.44.0
go.opentelemetry.io/otel/exporters/prometheus v0.66.0
go.opentelemetry.io/otel/metric v1.44.0
go.opentelemetry.io/otel/sdk v1.44.0
go.opentelemetry.io/otel/sdk/metric v1.44.0
golang.org/x/mod v0.38.0
gopkg.in/yaml.v3 v3.0.1
)
require (
cloud.google.com/go v0.123.0 // indirect
cloud.google.com/go/auth v0.20.0 // indirect
cloud.google.com/go/auth/oauth2adapt v0.2.8 // indirect
cloud.google.com/go/compute/metadata v0.9.0 // indirect
cloud.google.com/go/iam v1.11.0 // indirect
cloud.google.com/go/longrunning v1.2.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/azcore v1.22.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/internal v1.12.0 // indirect
github.com/Azure/azure-sdk-for-go/sdk/security/keyvault/internal v1.2.0 // indirect
github.com/AzureAD/microsoft-authentication-library-for-go v1.7.2 // indirect
github.com/beorn7/perks v1.0.1 // indirect
github.com/cespare/xxhash/v2 v2.3.0 // indirect
github.com/davecgh/go-spew v1.1.2-0.20180830191138-d8f796af33cc // indirect
github.com/docker/cli v29.6.2+incompatible // indirect
github.com/docker/docker-credential-helpers v0.9.3 // indirect
github.com/felixge/httpsnoop v1.0.4 // indirect
github.com/go-jose/go-jose/v4 v4.1.4 // indirect
github.com/go-logr/logr v1.4.3 // indirect
github.com/go-logr/stdr v1.2.2 // indirect
github.com/google/s2a-go v0.1.9 // indirect
github.com/google/uuid v1.6.0 // indirect
github.com/googleapis/enterprise-certificate-proxy v0.3.17 // indirect
github.com/googleapis/gax-go/v2 v2.23.0 // indirect
github.com/jackc/pgpassfile v1.0.0 // indirect
github.com/jackc/pgservicefile v0.0.0-20240606120523-5a60cdf6a761 // indirect
github.com/jackc/puddle/v2 v2.2.2 // indirect
github.com/klauspost/compress v1.19.1 // indirect
github.com/kylelemons/godebug v1.1.0 // indirect
github.com/munnerz/goautoneg v0.0.0-20191010083416-a7dc8b61c822 // indirect
github.com/opencontainers/go-digest v1.0.0 // indirect
github.com/opencontainers/image-spec v1.1.1 // indirect
github.com/pkg/browser v0.0.0-20240102092130-5ac0b6a4141c // indirect
github.com/pmezard/go-difflib v1.0.1-0.20181226105442-5d4384ee4fb2 // indirect
github.com/prometheus/client_model v0.6.2 // indirect
github.com/prometheus/common v0.70.1 // indirect
github.com/prometheus/otlptranslator v1.0.0 // indirect
github.com/prometheus/procfs v0.21.1 // indirect
github.com/sirupsen/logrus v1.9.4 // indirect
go.opentelemetry.io/auto/sdk v1.2.1 // indirect
go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.67.0 // indirect
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.67.0 // indirect
go.opentelemetry.io/otel/trace v1.44.0 // indirect
golang.org/x/crypto v0.54.0 // indirect
golang.org/x/net v0.57.0 // indirect
golang.org/x/oauth2 v0.36.0 // indirect
golang.org/x/sync v0.22.0 // indirect
golang.org/x/sys v0.47.0 // indirect
golang.org/x/text v0.40.0 // indirect
golang.org/x/time v0.15.0 // indirect
google.golang.org/api v0.287.1 // indirect
google.golang.org/genproto v0.0.0-20260319201613-d00831a3d3e7 // indirect
google.golang.org/genproto/googleapis/api v0.0.0-20260630182238-925bb5da69e7 // indirect
google.golang.org/genproto/googleapis/rpc v0.0.0-20260630182238-925bb5da69e7 // indirect
google.golang.org/grpc v1.82.1 // indirect
google.golang.org/protobuf v1.36.11 // indirect
gotest.tools/v3 v3.5.2 // indirect
)