deps(go): bump the go-dependencies group across 1 directory with 7 updates

[dependabot]

Bumps the go-dependencies group with 6 updates in the / directory:

Package	From	To
github.com/mark3labs/mcp-go	0.44.0	0.46.0
github.com/slack-go/slack	0.17.3	0.20.0
github.com/takara2314/slack-go-util	0.3.0	0.4.0
golang.ngrok.com/ngrok/v2	2.1.1	2.1.2
golang.org/x/net	0.50.0	0.52.0
golang.org/x/time	0.14.0	0.15.0

Updates github.com/mark3labs/mcp-go from 0.44.0 to 0.46.0

Commits

• 4d01ccd go fmt
• 74a975a feature: Add prompt filter and handler middleware support (#751)
• bbc88d3 Fix AddTaskTool task result payload handling (#765)
• 4fa4dbf fix: cancel in-flight request contexts on notifications/cancelled (#756)
• f2980c6 feat(server): add WithExperimental server option (#762)
• d70b6bf fix(oauth): preserve path components during metadata discovery (#761)
• 943f977 Add AgentRank score badge (#752)
• dd37ef1 fix(server): reject sync calls to task-only tools (#759)
• 8cbeefe feat(transport): make SSE endpoint and response timeouts configurable (#734)
• a28eeb6 Replace invopop/jsonschema with google/jsonschema-go (#760)
• Additional commits viewable in compare view

Updates github.com/slack-go/slack from 0.17.3 to 0.20.0

Release notes

Sourced from github.com/slack-go/slack's releases.

v0.20.0

[!WARNING] trigger_id and workflow_id are NOT in any documentation or in any of the official libraries, so exercise caution if you use these.

Added

• workflow_id and trigger_id in Message — It seems that some types of messages, e.g: bot_message, can carry trigger_id and workflow_id. WorkflowID was added by @​clayallsopp in slack-go/slack#1537
• RichTextQuote.Border field — optional border toggle (matches the docs now)
• RichTextPreformatted.Language field — enables syntax highlighting for preformatted blocks

Fixed

• Remove embedding of RichTextSection — RichTextQuote and RichTextPreformatted are now flattened as they should have always been. This is a breaking change for anyone using these structs directly.

New Contributors

• @​clayallsopp made their first contribution in slack-go/slack#1537

Full Changelog: slack-go/slack@v0.19.0...v0.20.0

v0.19.0

Added

• Add support for task_card and plan agent blocks by @​nlopes in slack-go/slack#1536
• Add optional HTTP retry for Web API (429, 5xx, connection errors) by @​olegbespalov in slack-go/slack#1532

Full Changelog: slack-go/slack@v0.18.0...v0.19.0

v0.18.0

This is the first stable release in the 0.18.x series — it includes everything from rc1 and rc2 plus a handful of new features and fixes that landed since.

There are a few breaking changes in this one. I tried to keep them to the minimum necessary but some were long overdue. Here's what you need to know.

Breaking changes

File upload API cleanup (#1481)

Slack discontinued the old files.upload API back in November 2025, so we finally removed the deprecated UploadFile, UploadFileContext, and FileUploadParameters. The V2 variants have been renamed to drop the suffix:

• UploadFileV2 → UploadFile
• UploadFileV2Context → UploadFileContext
• UploadFileV2Parameters → UploadFileParameters

Should be a quick search-and-replace for most codebases.

GetReactions return type (#1480)

GetReactions now returns ReactedItem instead of []ItemReaction. This aligns with what the Slack API actually returns — the item itself (message, file, or file_comment) alongside its reactions. To migrate, use resp.Reactions to get at the slice.

... (truncated)

Changelog

Sourced from github.com/slack-go/slack's changelog.

[0.20.0] - 2026-03-21

[!WARNING] trigger_id and workflow_id are NOT in any documentation or in any of the official libraries, so exercise caution if you use these.

Added

• workflow_id and trigger_id in Message — It seems that some types of messages, e.g: bot_message, can carry trigger_id and workflow_id.
• RichTextQuote.Border field — optional border toggle (matches the docs now)
• RichTextPreformatted.Language field — enables syntax highlighting for preformatted blocks

Fixed

• Remove embedding of RichTextSection — RichTextQuote and RichTextPreformatted are now flattened as they should have always been. This is a breaking change for anyone using these structs directly.

[0.19.0] - 2026-03-04

Added

• Optional HTTP retry for Web API — Retries are off by default. Enable with OptionRetry(n) for 429-only retries or OptionRetryConfig(cfg) for full control including 5xx and connection errors with exponential backoff. (#1532)
• task_card and plan agent blocks — New block types for task cards and plan agent blocks. (#1536)

Changed

• CI: bumped actions/stale from 10.1.1 to 10.2.0. (#1534)
• Use golangci-lint in Makefile. (#1533)

[0.18.0] - 2026-02-21

Added

• focus_on_load support for remaining block elements — Static/external/users/conversations/channels select, multi-select variants, datepicker, timepicker, plain_text_input, checkboxes, radio_buttons, and number_input. (#1519)
• PlainText and PreviewPlainText fields on File — Email file objects now include the plain text body fields instead of silently discarding them. (#1522)
• Missing fields on User, UserProfile, and EnterpriseUser — who_can_share_contact_card, always_active, pronouns, image_1024, is_custom_image, status_text_canonical, huddle_state, huddle_state_expiration_ts, start_date, and is_primary_owner. (#1526)
• Work Objects support — Chat unfurl with Work Object metadata, entity details (flexpane), entity_details_requested event, and associated types (WorkObjectMetadata, WorkObjectEntity, WorkObjectExternalRef). (#1529)
• admin.roles.* API methods — admin.roles.listAssignments, admin.roles.addAssignments, and admin.roles.removeAssignments. (#1520)

Fixed

• UserProfile.Skype JSON tag — Corrected typo from "skyp" to "skype". (#1524)
• assistant.threads.setSuggestedPrompts title parameter — Title is now sent when non-empty. (#1528)

Changed

• CI test matrix updated: dropped Go 1.24, added Go 1.26; bumped golangci-lint to v2.10.1. (#1530)

... (truncated)

Commits

• 449e341 chore: v0.20.0
• 442f330 chore: update CHANGELOG
• 0b4eb25 feat!: flatten RichTextPreformatted to remove RichTextSection embedding
• 46d7b49 feat!: add Border to RichTextQuote and Language to RichTextPreformatted
• c93b916 Revise warning for trigger_id and workflow_id
• 561f12f feat: add TriggerID to Message
• 8e62a1a Add WorkflowID to message (#1537)
• 891d7e5 chore: add golangci-lint to mise
• 8917d11 docs: update README with links and remove old warning
• eaddf77 chore: v0.19.0
• Additional commits viewable in compare view

Updates github.com/takara2314/slack-go-util from 0.3.0 to 0.4.0

Release notes

Sourced from github.com/takara2314/slack-go-util's releases.

v0.4.0

I'm excited to announce v0.4.0! This release brings a major new feature — nested list support — along with CI infrastructure, Go 1.25 support, and dependency updates.

✨ New Features

Nested list support in Markdown to Slack Block Kit conversion

Previously, nested Markdown lists were silently dropped because the parser only handled flat list items. This release adds full nested list support!

The Problem:

• Nested lists (indented sub-items) were silently stripped during conversion
• Only top-level list items were rendered in Slack

The Solution:

• Added recursive processing of nested lists via collectListItems() and collectListItemsFlat()
• Groups list items by indent level and style using groupItemsByIndent()
• Creates separate RichTextList elements with proper Indent values
• Supports mixed ordered/unordered nested lists

Example:

- Parent item
  - Child item 1
  - Child item 2
- Another parent

Now correctly generates Block Kit rich_text blocks with indent=0 for parent items and indent=1 for children! ✨

Thanks to @​sjawhar for this contribution! 🙏

🔧 Infrastructure & CI

GitHub Actions test workflow

• Added .github/workflows/test.yaml for automated testing on push to main and pull requests
• Tests run against Go 1.25 and 1.26 using a matrix strategy
• Includes race condition detection (-race flag)
• Added Makefile for local test execution (make test)

Go 1.25 and 1.26 support

• Updated minimum Go version to 1.25 in go.mod
• CI matrix covers Go 1.25 and 1.26

📦 Dependency Updates

Package	Before	After

... (truncated)

Commits

• 9cbf618 feat: update README and add example for Markdown to Slack conversion (#8)
• d66a673 feat: setting up to support Go 1.25 (#7)
• 24415e2 feat: setting default go version to 1.25 (#6)
• d68e1dc Refactor adding comments for doc and english only (#5)
• d0e6a95 feat: implement test ci (#4)
• 72eb5f2 feat: add support for nested lists in markdown to blocks conversion (#3)
• See full diff in compare view

Updates golang.ngrok.com/ngrok/v2 from 2.1.1 to 2.1.2

Release notes

Sourced from golang.ngrok.com/ngrok/v2's releases.

v2.1.2

What's Changed

• chore: update Go version by @​bmpngrok in ngrok/ngrok-go#221
• feature: add diagnostics support by @​bmpngrok in ngrok/ngrok-go#225
• expose connection and request metrics by @​kmvachhani in ngrok/ngrok-go#220
• add support for endpoint name by @​kmvachhani in ngrok/ngrok-go#234
• feat: expose the agent session ID by @​bmpngrok in ngrok/ngrok-go#237

New Contributors

• @​zombiezen made their first contribution in ngrok/ngrok-go#231

Full Changelog: ngrok/ngrok-go@v2.1.1...v.2.1.2

Commits

• 89f78c8 Merge pull request #237 from ngrok/bmps/session-id
• 914f216 feat: expose the agent session ID
• f7805c5 Merge pull request #236 from ngrok/bmps/go-fix
• f14dfdd chore: run go fix
• 845f770 add support for endpoint name (#234)
• 8702ab9 Rework integration_tests.MakeHTTPRequest function (#232)
• 2296322 Extract and unify test certificate creation (#233)
• 04b0af1 Rework integration_tests.SetupListener function (#230)
• f3ca474 Automatically disconnect agent during integration test cleanup (#228)
• f1eb6f9 Introduce internal/testcontext package (#227)
• Additional commits viewable in compare view

Updates golang.org/x/net from 0.50.0 to 0.52.0

Commits

• 316e20c go.mod: update golang.org/x dependencies
• 9767a42 internal/http3: add support for plugging into net/http
• 4a81284 http2: update docs to disrecommend this package
• dec6603 dns/dnsmessage: reject too large of names early during unpack
• 8afa12f http2: deprecate write schedulers
• 38019a2 http2: add missing copyright header to export_test.go
• 039b87f internal/http3: return error when Write is used after status 304 is set
• 6267c6c internal/http3: add HTTP 103 Early Hints support to ClientConn
• 591bdf3 internal/http3: add HTTP 103 Early Hints support to Server
• 1faa6d8 internal/http3: avoid potential race when aborting RoundTrip
• Additional commits viewable in compare view

Updates golang.org/x/sync from 0.19.0 to 0.20.0

Commits

• ec11c4a errgroup: fix a typo in the documentation
• 1a58307 all: modernize interface{} -> any
• 3172ca5 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Updates golang.org/x/time from 0.14.0 to 0.15.0

Commits

• 812b343 all: upgrade go directive to at least 1.25.0 [generated]
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions