adam magued
6eccc42c1e
fix: Restore request body on primary rate limit retry ( #4657 )
2026-10-26 15:22:52 -04:00
sai5880
2840290130
fix: Redact sensitive query parameters in otel transport ( #4659 )
2026-10-26 11:53:42 -04:00
Steve Hipwell
69bd00175e
feat!: Add token source for generic auth logic ( #4637 )
...
BREAKING CHANGE: `BasicAuthTransport`, `UnauthenticatedRateLimitedTransport` & `WithHTTPClient` have been removed as they do not fit with the required behaviour to only authenticate requests for specific endpoints. `CheckRedirect` and `Jar` are no longer supported.
2026-10-22 12:02:08 -04:00
Jam Balaya
3c03a645b2
fix: Handle string-valued error responses ( #4660 )
2026-10-22 10:39:20 -04:00
Sebastian Turner
28d2616878
fix: Use BaseURL relative path for rate limit category ( #4644 )
2026-10-19 11:24:54 -04:00
Glenn Lewis
5b37d46b98
fix!: Match request body fields to the OpenAPI schemas ( #4581 )
2026-09-23 11:23:20 -04:00
Glenn Lewis
8d9197f774
fix!: Send credentials only to configured origins ( #4564 )
...
BREAKING CHANGE: Credentials are sent only to a client's configured API and upload origins — every other destination, including a redirect hop, goes out unauthenticated. A request body aimed outside those origins is refused. `BasicAuthTransport` and `UnauthenticatedRateLimitedTransport` gained `AllowedOrigins`, which GitHub Enterprise users must set.
2026-09-18 08:48:43 -04:00
tunztunztunz
44d6f187e7
feat: Add asynchronous SBOM support ( #4543 )
2026-09-15 11:38:59 -04:00
Yavor Lulchev
c48dbf54a1
fix: Close the original response body on non-2xx responses ( #4486 )
2026-08-28 13:41:31 -04:00
Jam Balaya
da8ff819ae
perf: Reduce allocations in Client.Do response decoding with a buffer pool ( #4494 )
2026-08-28 13:22:34 -04:00
Ajay Kemparaj
f9fec07de4
feat: Require Go 1.26 and use new(expr) for pointer literals ( #4481 )
2026-08-28 12:18:49 -04:00
Steve Hipwell
2ec5b20005
refactor!: Update teams create & update patterns ( #4446 )
...
BREAKING CHANGE: `CreateTeam` and `UpdateTeamBy*` now take new body params by value.
2026-08-13 12:44:17 -04:00
Glenn Lewis
68ec62e468
chore: Fix comment typo ( #4410 )
2026-07-25 11:38:01 -04:00
Glenn Lewis
e77be1b571
chore: Fix flaky tests with deterministic runs ( #4377 )
2026-07-10 10:10:49 -04:00
Glenn Lewis
9b2c6655ce
chore: Fix flaky unit test ( #4374 )
2026-07-09 10:06:34 -04:00
Glenn Lewis
595de3d4b8
chore: Replace time.Date with referenceTime ( #4325 )
2026-06-24 15:42:55 -04:00
Jam Balaya
216f315f51
fix: Set GetBody on uploads for HTTP/2 retry ( #4318 )
2026-06-22 10:35:48 -04:00
Oleksandr Redko
34dd99820c
fix: Reject URL path segments containing percent-encoded dots ( #4291 )
2026-06-11 12:58:14 -04:00
Oleksandr Redko
b743e860e5
fix: Comparison of durations in AbuseRateLimitError.Is ( #4292 )
2026-06-11 12:51:23 -04:00
Oleksandr Redko
3215e0320e
test: Remove redundant Marshal tests ( #4266 )
2026-06-04 09:22:07 -04:00
Steve Hipwell
65d79c6624
feat: Add client API version support ( #4246 )
2026-05-27 05:22:15 -04:00
Steve Hipwell
69fa364443
feat: Add support for setting client URLs ( #4240 )
2026-05-20 20:13:13 -04:00
Steve Hipwell
d9f999787d
feat!: Refactor client constructor to use options pattern ( #4201 )
...
BREAKING CHANGE: Clients are now constructed with a nicer builder pattern. See docs for details.
2026-05-14 17:24:26 -04:00
Glenn Lewis
953382f6b5
fix: Close httptest server to prevent test flakiness ( #4210 )
2026-05-11 18:31:05 -04:00
evilgensec
6c585920e8
fix: Limit HTTP error response body reads to prevent OOM ( #4191 )
2026-05-08 11:19:45 -04:00
Dhananjay Mishra
0a16e22eba
refactor: Use testJSONBody helper for request body assertions in tests ( #4183 )
2026-05-01 08:13:24 -04:00
Dan Moseley
a75818a671
fix: Include RetryAfter in AbuseRateLimitError.Error output ( #4181 )
2026-04-26 10:50:44 -04:00
Steve Hipwell
9fbf4bef19
feat!: Refactor request context ( #4151 )
...
BREAKING CHANGE: All internal calls now provide `Context` via the `Request` itself.
2026-04-24 14:45:31 -04:00
mohammadmseet-hue
1a1890b546
security: Reject cross-host redirects to prevent Authorization leak ( #4171 )
2026-04-20 07:29:09 -04:00
mohammadmseet-hue
cf3388cf6d
fix: Reject URL path segments containing ".." in all request methods ( #4150 )
2026-04-17 11:00:29 -04:00
Oleksandr Redko
33cf038ac1
docs: Add apiVersion to GitHub API link ( #4147 )
2026-04-11 10:47:17 -04:00
Oleksandr Redko
9ad687df1e
fix: Preserve Marketplace.Stubbed during client copy ( #4144 )
2026-04-10 07:16:53 -04:00
Yoo_LCD
96a3651222
fix: Expand sanitizeURL secrets redactions ( #4126 )
2026-04-03 11:24:01 -04:00
MangoMaker
4e5486eb13
fix: Synchronize requestCount in rate limit tests ( #4124 )
2026-03-27 13:07:31 -05:00
Glenn Lewis
a2063a76fb
chore: Remove unnecessary use of new and &SomeStruct{} and add new extraneousnew custom linter ( #4106 )
2026-03-18 17:12:53 -04:00
Oleksandr Redko
1b9241152b
test: Fix flaky TestDo_rateLimit_abuseRateLimitError_xRateLimitReset ( #4057 )
2026-03-02 09:50:53 -05:00
Glenn Lewis
ca13c0cd4b
fix: Fix data race on Windows ( #4051 )
2026-02-28 09:16:23 -05:00
Oleksandr Redko
ba35d25e64
chore: Simplify form value assertions in tests ( #4048 )
2026-02-27 11:50:59 -05:00
Oleksandr Redko
5158bb8e5f
chore: Improve testJSONMarshal ( #4042 )
2026-02-27 07:27:18 -05:00
Oleksandr Redko
a697201172
chore: Fix TestNewFormRequest ( #4043 )
2026-02-26 14:54:23 -05:00
Nurzhan Muratkhan
92a3830f9b
feat: Ensure compatibility with encoding/json/v2 experiment ( #4029 )
2026-02-23 09:54:55 -05:00
Oleksandr Redko
5096ac8993
chore: Improve addOptions implementation ( #3998 )
2026-02-13 07:24:21 -05:00
Claus Näveke
de4dfc3992
fix: Add support for GitHub Enterprise cloud upload URLs ( #3993 )
2026-02-11 15:02:16 -05:00
Mohamad Al-Zawahreh
5d70283e9d
feat(otel): Add native OpenTelemetry Transport module ( #3938 )
2026-02-04 16:18:27 -05:00
Ladislav Prskavec
72c952a212
fix: Handle HTTP 429 status code for rate limiting ( #3951 )
2026-01-30 08:44:57 -05:00
Ville Skyttä
cf3fb2319b
feat: Add dependency_sbom rate limit support ( #3908 )
2026-01-13 11:03:06 -05:00
Oleksandr Redko
d47559a679
chore: Enable 'modernize'; bump golangci-lint to v2.6.1 ( #3817 )
2025-11-08 15:10:32 -05:00
Oleksandr Redko
ab86053cf2
test: Ensure Authorization is not set with empty token ( #3790 )
2025-10-24 08:50:21 -04:00
Oleksandr Redko
68b82b5bb1
refactor: Simplify for range loops ( #3762 )
2025-10-06 14:47:09 -04:00
Glenn Lewis
4505771989
Prefer %v over %d,%s and add fmtpercentv custom linter ( #3756 )
2025-10-05 21:39:53 -04:00
adam magued