chore(deps): bump github.com/bds421/rho-kit/httpx/v2 from 2.0.2 to 2.7.0

[dependabot]

Bumps github.com/bds421/rho-kit/httpx/v2 from 2.0.2 to 2.7.0.

Release notes

Sourced from github.com/bds421/rho-kit/httpx/v2's releases.

rho-kit v2.7.0

Object-storage exact-generation release (coordination tag release/v2.7.0). Additive only; no v2 API or behavior changes for existing callers.

• feat(storage). Add paged exact-generation enumeration (ExactVersionPageLister, ExactVersionCursor, ExactVersionPage) as the recovery and export complement to the bounded legal-erasure listers. Cursors are opaque and bind key plus generation; delete markers and tombstones count against the page limit, and backends fail closed when a provider reports truncation without an advancing cursor. Implemented for the memory, local, and S3 backends and forwarded through the retry, circuit-breaker, and encryption decorators.
• feat(storage). Add versionrelocation, an opt-in decorator that resolves historical exact-generation identities to their current physical generation through a caller-owned resolver. Unversioned operations and physical enumeration remain unchanged; resolvers may move a generation but never rewrite an object key.
• fix(storage/s3). Use WhenRequired response checksum validation for explicitly configured S3-compatible endpoints, which commonly omit optional response checksum headers and otherwise produced one SDK warning per successful GetObject. Native AWS keeps its SDK/operator-selected policy.
• chore(deps). Refresh every direct external dependency to its latest minor/patch release, including the AWS SDK, smithy-go, gRPC, Prometheus client, jwx, goose, River, Kubernetes client, and the Google Cloud SDKs.

rho-kit v2.6.0

Changelog

v2.6.0 — 2026-07-22

Platform-foundations release (coordination tag release/v2.6.0).

• feat(identity). Add a canonical authenticated principal and consistent HTTP/gRPC, authorization, and audit-actor projection.
• feat(auth). Add standards-based OIDC relying-party wiring, hardened OAuth2 browser-flow state storage, and client-credentials lifecycle support.
• feat(contracts). Add versioned contract artifacts, compatibility checks, CI validation, and generated-service contract scaffolding.
• feat(messaging). Add a durable PostgreSQL transactional inbox paired with outbox schema-version handling and Docker-backed recovery coverage.
• feat(tooling). Add production scaffolding, contract and OIDC doctor rules, catalog reporting, ADRs, and release verification guidance.

v2.5.1 — 2026-07-22

Patch release for S3-compatible object storage.

• fix(storage/s3). Keep large PutObject requests compatible with custom endpoints that reject optional AWS chunked checksums, while preserving the

... (truncated)

Changelog

Sourced from github.com/bds421/rho-kit/httpx/v2's changelog.

v2.7.0 — 2026-08-03

Object-storage exact-generation release (coordination tag release/v2.7.0). Additive only; no v2 API or behavior changes for existing callers.

• feat(storage). Add paged exact-generation enumeration (ExactVersionPageLister, ExactVersionCursor, ExactVersionPage) as the recovery and export complement to the bounded legal-erasure listers. Cursors are opaque and bind key plus generation; delete markers and tombstones count against the page limit, and backends fail closed when a provider reports truncation without an advancing cursor. Implemented for the memory, local, and S3 backends and forwarded through the retry, circuit-breaker, and encryption decorators.
• feat(storage). Add versionrelocation, an opt-in decorator that resolves historical exact-generation identities to their current physical generation through a caller-owned resolver. Unversioned operations and physical enumeration remain unchanged; resolvers may move a generation but never rewrite an object key.
• fix(storage/s3). Use WhenRequired response checksum validation for explicitly configured S3-compatible endpoints, which commonly omit optional response checksum headers and otherwise produced one SDK warning per successful GetObject. Native AWS keeps its SDK/operator-selected policy.
• chore(deps). Refresh every direct external dependency to its latest minor/patch release, including the AWS SDK, smithy-go, gRPC, Prometheus client, jwx, goose, River, Kubernetes client, and the Google Cloud SDKs.

v2.6.0 — 2026-07-22

Platform-foundations release (coordination tag release/v2.6.0).

• feat(identity). Add a canonical authenticated principal and consistent HTTP/gRPC, authorization, and audit-actor projection.
• feat(auth). Add standards-based OIDC relying-party wiring, hardened OAuth2 browser-flow state storage, and client-credentials lifecycle support.
• feat(contracts). Add versioned contract artifacts, compatibility checks, CI validation, and generated-service contract scaffolding.
• feat(messaging). Add a durable PostgreSQL transactional inbox paired with outbox schema-version handling and Docker-backed recovery coverage.
• feat(tooling). Add production scaffolding, contract and OIDC doctor rules, catalog reporting, ADRs, and release verification guidance.

v2.5.1 — 2026-07-22

Patch release for S3-compatible object storage.

• fix(storage/s3). Keep large PutObject requests compatible with custom endpoints that reject optional AWS chunked checksums, while preserving the SDK/operator request and response checksum policies for native AWS S3.

v2.5.0 — 2026-07-21

... (truncated)

Commits

• 7682742 chore(deps): refresh direct dependencies and add v2.7.0 release notes (#102)
• 3e445b4 feat(storage): paged exact generation enumeration and version relocation (#99)
• 135b28d chore(deps): bump the go-deps-minor-patch group across 1 directory with 25 up...
• eb94faf chore(ci): bump actions/setup-go from 6 to 7 in the gh-actions group (#100)
• 95b1525 feat(storage): exact generation and bounded prefix operations (#98)
• 7ba24c9 release: prepare v2.6.0 module level 7 [skip ci]
• c1a9b00 release: prepare v2.6.0 module level 6 [skip ci]
• 1a5423c release: prepare v2.6.0 module level 5 [skip ci]
• e26fc51 release: prepare v2.6.0 module level 4 [skip ci]
• dd0d84a release: prepare v2.6.0 module level 3 [skip ci]
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)