basepeak-ai/gptscript
Watch
6
0
Fork
You've already forked gptscript
 0
Code Issues 1 Pull requests 1 Projects Releases 3 Packages Wiki Activity Actions 5

fix(deps): bump basepeak-ai modules to patched mains #23

Merged
thklein merged 1 commit from fix/deps-basepeak-modules into main 2026-10-18 10:43:50 +00:00
Conversation 0 Commits 1 Files changed 2 +18 -18
thklein commented 2026-10-18 10:29:21 +00:00
Owner
Copy link

Bumps the forked module dependencies to their current main, which now carry the Go 1.26.9 bump, vulnerable-dependency fixes and NOTICE/attribution files:

  • broadcaster → a47f18d (broadcaster#1, #2)
  • chat-completion-client → 047c247 (chat-completion-client#1, #2)
  • cmd → 7783c28 (cmd#1, #2: cobra 1.10.2, logrus 1.10.2)
  • tui → a3559fa (tui#1, #2: x/net v0.61.0, goldmark v1.7.17)

Transitively: bluemonday v1.0.26 → v1.0.27 (v1.0.26 is retracted), gorilla/css v1.0.0 → v1.0.1. go-gptscript is unchanged.

Local verification (go1.26.9):

  • go mod tidy, go build ./..., go vet ./...: clean
  • govulncheck ./...: 0 vulnerabilities
  • go test ./... (excluding integration, skipping TestMCPLoad): only the known pre-existing TestLoad / TestLoad_GithubEnterprise failures in pkg/loader/github

CI test/integration jobs still cannot fetch private modules while the repos are private; that is pre-existing.

Bumps the forked module dependencies to their current `main`, which now carry the Go 1.26.9 bump, vulnerable-dependency fixes and NOTICE/attribution files: - broadcaster → a47f18d (broadcaster#1, #2) - chat-completion-client → 047c247 (chat-completion-client#1, #2) - cmd → 7783c28 (cmd#1, #2: cobra 1.10.2, logrus 1.10.2) - tui → a3559fa (tui#1, #2: x/net v0.61.0, goldmark v1.7.17) Transitively: bluemonday v1.0.26 → v1.0.27 (v1.0.26 is retracted), gorilla/css v1.0.0 → v1.0.1. go-gptscript is unchanged. Local verification (go1.26.9): - `go mod tidy`, `go build ./...`, `go vet ./...`: clean - `govulncheck ./...`: 0 vulnerabilities - `go test ./...` (excluding integration, skipping TestMCPLoad): only the known pre-existing TestLoad / TestLoad_GithubEnterprise failures in pkg/loader/github CI test/integration jobs still cannot fetch private modules while the repos are private; that is pre-existing.
fix(deps): bump basepeak-ai modules to patched mains
Some checks failed
integration / integration (windows-latest) (pull_request) Waiting to run
Details
test / test (windows-latest) (pull_request) Waiting to run
Details
smoke / check-label (pull_request_target) Failing after 1s
Details
smoke / gpt-4o-2024-08-06 (pull_request_target) Has been skipped
Details
smoke / gpt-4o-mini-2024-07-18 (pull_request_target) Has been skipped
Details
smoke / claude-3-7-sonnet-20250219 (pull_request_target) Has been skipped
Details
Validate docs build / validate-docs (pull_request) Failing after 13s
Details
test / test (ubuntu-22.04) (pull_request) Failing after 14s
Details
integration / integration (ubuntu-22.04) (pull_request) Failing after 16s
Details
726ead3fc1
 
Pull in the Go 1.26.9 and dependency fixes merged in broadcaster#1,
chat-completion-client#1, cmd#1 and tui#1, plus their NOTICE files.
tui's bump brings bluemonday v1.0.27 (v1.0.26 is retracted) and
gorilla/css v1.0.1.
thklein deleted branch fix/deps-basepeak-modules 2026-10-18 10:43:50 +00:00
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels   
area/engine

   
clarity/clear

   
enhancement

   
security

   
size/M
No labels
area/engine
clarity/clear
enhancement
security
size/M
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
basepeak-ai/gptscript!23
No description provided.