Skip to content

build(deps): Bump github.com/maximhq/bifrost/core from 1.7.0 to 1.7.2 in /authbridge/authlib - #692

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/authbridge/authlib/github.com/maximhq/bifrost/core-1.7.2
Closed

build(deps): Bump github.com/maximhq/bifrost/core from 1.7.0 to 1.7.2 in /authbridge/authlib#692
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/authbridge/authlib/github.com/maximhq/bifrost/core-1.7.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/maximhq/bifrost/core from 1.7.0 to 1.7.2.

Release notes

Sourced from github.com/maximhq/bifrost/core's releases.

Core v1.7.2

Core Release v1.7.2

  • feat: added ChatGPT passthrough support to the OpenAI provider
  • feat: added user-agent tracking schemas with custom user-agent mapping
  • feat: MCP tool execution plugin pipeline improvements

Installation

go get github.com/maximhq/bifrost/core@v1.7.2

This release was automatically created from version file: core/version

Core v1.7.1

Core Release v1.7.1

  • feat: add Sarvam AI provider with chat, text-to-speech, and speech-to-text support (thanks @​Purvi09!)
  • feat: add ElevenLabs sound effects (text-to-sound) support (thanks @​SecretSun!)
  • feat: add ProjectID to Bedrock and Bedrock Mantle key configs with per-alias overrides for Bedrock, Bedrock Mantle, and Vertex
  • feat: add additional_tools message type support
  • feat: force single-region config in Vertex key config
  • feat: phase-scoped redaction and revealing with transient redaction data field, plus ClearPausedStreamBuffer for pause-accumulate stream flows
  • fix: map web search options to Google Search grounding in the Gemini API
  • fix: parse SecretVar JSON with ref/env_var fields even when value is absent
  • fix: cap max reasoning effort in OpenAI
  • fix: honor service tier in OpenAI chat completion
  • fix: support GA transcription-type sessions in POST /v1/realtime/client_secrets (thanks @​Shaik-Sirajuddin!)
  • fix: support diarized_json transcription segments and ElevenLabs speaker passthrough (thanks @​Shaik-Sirajuddin!)
  • fix: sanitize tool_use/tool_result ids to Anthropic's charset (thanks @​Shaik-Sirajuddin!)
  • fix: never persist masked provider key previews (thanks @​eyeveil!)
  • fix: make tracing span lookup nil-safe to prevent panic on streaming errors (thanks @​eyeveil!)
  • fix: enable rerank for custom OpenAI-compatible providers (thanks @​eyeveil!)
  • fix: forward and rebuild Anthropic server-side tool_search on the Responses path (thanks @​ws4charlie!)
  • fix: zero pooled ChannelMessage references on release to avoid pinning request bodies (thanks @​citrocat!)
  • fix: round-trip Anthropic redacted_thinking blocks on the responses surface so multi-turn tool use with redacted reasoning can be replayed (thanks @​fus3r!)
  • fix: reset HasEmittedWebSearch when recycling pooled Gemini responses stream state so grounded streaming requests keep emitting web_search_call items (thanks @​fus3r!)
  • fix: omit role from OpenAI Responses non-message items (thanks @​nettee!)
  • fix: serialize OpenAI compaction request input correctly (thanks @​mcclurmc!)
  • fix: preserve reasoning_config on Bedrock cross-provider translation (thanks @​Purvi09!)
  • fix: preserve Gemini file upload MIME types for GenAI file URI completions
  • fix: Gemini video reference fields map to instances (thanks @​vojthor!)
  • fix: accept object-valued tool-call arguments (e.g. tool_search_call) on the Responses API streaming path
  • fix: recover from idle-timeout timer-goroutine panic that could crash the process
  • fix: deterministic MCP tool ordering for prompt cache stability
  • fix: pass through gs:// image URLs on Vertex Gemini
  • fix: signal Bedrock max_output_tokens truncation on Responses API (thanks @​jeremym-tanium!)
  • fix: warn callers not to truncate the #t= temp-token fragment on MCP inline-auth links (thanks @​MarcusPeng!)

... (truncated)

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [github.com/maximhq/bifrost/core](https://github.com/maximhq/bifrost) from 1.7.0 to 1.7.2.
- [Release notes](https://github.com/maximhq/bifrost/releases)
- [Changelog](https://github.com/maximhq/bifrost/blob/dev/docs/release-cadence.mdx)
- [Commits](maximhq/bifrost@core/v1.7.0...core/v1.7.2)

---
updated-dependencies:
- dependency-name: github.com/maximhq/bifrost/core
  dependency-version: 1.7.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 23:15
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 20, 2026
@dependabot @github

dependabot Bot commented on behalf of github Jul 27, 2026

Copy link
Copy Markdown
Contributor Author

Superseded by #703.

@dependabot dependabot Bot closed this Jul 27, 2026
@dependabot
dependabot Bot deleted the dependabot/go_modules/authbridge/authlib/github.com/maximhq/bifrost/core-1.7.2 branch July 27, 2026 23:14
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants