Skip to content

chore(cli): update Speakeasy OpenAPI generator to v2.950.8 - #120

Merged
copybara-service[bot] merged 1 commit into
mainfrom
copybara/1004101989
Oct 22, 2026
Merged

copybara-service[bot] merged 1 commit into
mainfrom
copybara/1004101989

Conversation

@copybara-service

@copybara-service copybara-service Bot commented Oct 21, 2026 •

Copy link
Copy Markdown

chore(cli): update Speakeasy OpenAPI generator to v2.950.8

Sync third_party/golang/github_com/speakeasy_api/openapi_generation/v/v2 to https://github.com/speakeasy-api/openapi-generation@c479885 (v2.950.8) and regenerate all SDKs (Python, TypeScript, Java, Go, Dotnet, and CLI).

This update includes an important Go toolchain security bump (go 1.26.8 -> go 1.26.10):

  • Security (crypto/x509): Eight eMudhra (emSign) intermediate CA certificate private keys were reported compromised. Go 1.26.10 blocks the public keys of those compromised intermediates in crypto/x509 so certificate chains signed by them no longer verify.
  • Require go 1.26.10 in generated go.mod files (face5cd) and update third_party/gemini_api_cli/README.md so consumers and CLI builds using default GOTOOLCHAIN=auto automatically select a patched Go 1.26.10+ toolchain instead of an older toolchain that still accepts the compromised CA intermediates.
  • Bump the generator's own Go toolchain to 1.26.10 (5033ab8).

@copybara-service
copybara-service Bot requested a review from a team October 21, 2026 19:36
Sync `third_party/golang/github_com/speakeasy_api/openapi_generation/v/v2` to `https://github.com/speakeasy-api/openapi-generation@c479885` (`v2.950.8`) and regenerate all SDKs (Python, TypeScript, Java, Go, Dotnet, and CLI).

This update includes an important Go toolchain security bump (`go 1.26.8` -> `go 1.26.10`):
- **Security (`crypto/x509`)**: Eight eMudhra (`emSign`) intermediate CA certificate private keys were reported compromised. Go `1.26.10` blocks the public keys of those compromised intermediates in `crypto/x509` so certificate chains signed by them no longer verify.
- Require `go 1.26.10` in generated `go.mod` files (`face5cd`) and update `third_party/gemini_api_cli/README.md` so consumers and CLI builds using default `GOTOOLCHAIN=auto` automatically select a patched Go `1.26.10+` toolchain instead of an older toolchain that still accepts the compromised CA intermediates.
- Bump the generator's own Go toolchain to `1.26.10` (`5033ab8`).

PiperOrigin-RevId: 1004902303
@copybara-service
copybara-service Bot merged commit b47b75d into main Oct 22, 2026
5 checks passed
@copybara-service
copybara-service Bot deleted the copybara/1004101989 branch October 22, 2026 18:01
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants