fix(deps): update module github.com/google/go-github/v84 to v88

[tagoro9-renovatebot]

This PR contains the following updates:

Package	Change	Age	Confidence
github.com/google/go-github/v84	v84.0.0 -> v88.0.0

---

Release Notes

google/go-github (github.com/google/go-github/v84)

v88.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change app installation Find* methods to Get* (#​4243)
  BREAKING CHANGE: App installation methods are renamed from Find* to Get*.

...and the following additional changes:

• chore: Bump version of go-github to v88.0.0 (#​4245)
• chore: Update openapi_operations.yaml (#​4242)
• feat: Add support for setting client URLs (#​4240)
• refactor: Add constants for API versions (#​4236)
• docs: Formatting and punctuation changes (#​4235)
• feat: Add GetParentIssue for sub-issues (#​4232)
• chore: Bump go-github from v86 to v87 in /scrape (#​4234)

v87.0.0

Compare Source

This release contains the following breaking API changes:

• refactor!: Change GetConsumedLicenses to ListConsumedLicenses (#​4226)
  BREAKING CHANGE: EnterpriseService.GetConsumedLicenses is now EnterpriseService.ListConsumedLicenses.
• refactor!: Change GetAllRepositoryRulesets to ListAllRepositoryRulesets (#​4227)
  BREAKING CHANGE: OrganizationsService.GetAllRepositoryRulesets is now OrganizationsService.ListAllRepositoryRulesets.
• refactor!: Change GetRulesForBranch to ListRulesForBranch (#​4229)
  BREAKING CHANGE: RepositoriesService.GetRulesForBranch is now RepositoriesService.ListRulesForBranch.
• feat!: Refactor client constructor to use options pattern (#​4201)
  BREAKING CHANGE: Clients are now constructed with a nicer builder pattern. See docs for details.
• fix!: Align IssueFieldValues with schema (#​4207)
  BREAKING CHANGE: IssueRequest.IssueFieldValues type is changed.

...and the following additional changes:

• chore: Bump version of go-github to v87.0.0 (#​4233)
• feat: Add enterprise app installation lookup (#​4230)
• chore: Update openapi_operations.yaml (#​4228)
• fix: Use value receiver for MarshalJSON (#​4211)
• chore: Update dependencies (#​4224)
• fix: Close httptest server to prevent test flakiness (#​4210)
• feat: Add two new fields to org CodeSecurityConfiguration (#​4205)
• chore: Bump golangci-lint to v2.12.2 (#​4206)
• build(deps): Bump github.com/in-toto/in-toto-golang from 0.9.0 to 0.11.0 in /example (#​4203)
• fix: Limit HTTP error response body reads to prevent OOM (#​4191)
• feat: Add issue field values support for write and read (#​4200)
• chore: Bump go-github from v85 to v86 in /scrape (#​4199)

v86.0.0

Compare Source

This release contains the following breaking API changes:

• feat!: Refactor request context (#​4151)
  BREAKING CHANGE: All internal calls now provide Context via the Request itself.
• feat!: Add OIDC authentication support to PrivateRegistries (#​4159)
  BREAKING CHANGE: PrivateRegistriesService is updated to API version 2026-03-10 with struct and response changes.

...and the following additional changes:

• chore: Bump version of go-github to v86.0.0 (#​4198)
• test: Fix invalid JSON payloads in actions workflow runs tests (#​4197)
• feat: Add repo download contents sentinel errors (#​4192)
• chore: Fix otel module name (#​4187)
• feat: Add typed Copilot metrics download helpers (#​4177)
• feat: Add deploy_keys_enabled_for_repositories and secret scanning custom link fields to Organization struct (#​4188)
• refactor: Use testJSONBody helper for request body assertions in tests (#​4183)
• build(deps): Bump github.com/getkin/kin-openapi from 0.135.0 to 0.137.0 in /tools (#​4184)
• fix: Include RetryAfter in AbuseRateLimitError.Error output (#​4181)
• fix: Handle string-typed reviewer ID in Ruleset API responses (#​4178)
• feat: Add ArchivedAt field to Organization struct (#​4179)
• feat: Add Copilot coding agent and content exclusion org endpoints (#​4176)
• chore: Bump go-github from v84 to v85 in /scrape (#​4174)

v85.0.0

Compare Source

This release contains the following breaking API changes:

• fix!: Resolve inconsistent options for create and update on custom org role (#​4075)
  BREAKING CHANGE: GetOrgRole, CreateCustomOrgRole, and UpdateCustomOrgRole have new params and return values.
• fix!: Change id from int64 to string in ActivityService.MarkThreadDone (#​4056)
  BREAKING CHANGE: ActivityService.MarkThreadDone accepts string id instead of int64.

...and the following additional changes:

• chore: Bump version of go-github to v85.0.0 (#​4173)
• chore: Update openapi_operations.yaml (#​4172)
• security: Reject cross-host redirects to prevent Authorization leak (#​4171)
• chore: Improve GitHub Actions workflows lint and testing (#​4169)
• chore: Switch legacy redirect handling to new pattern (#​4161)
• feat: Add CodeSecurity to SecurityAndAnalysis (#​4155)
• fix: Reject URL path segments containing ".." in all request methods (#​4150)
• feat: Refactor repositories download contents (#​4153)
• chore: Bump google.org/x/tools to v0.44.0 in /tools (#​4168)
• docs: Fix broken blog post link (#​4160)
• build(deps): Bump github.com/sigstore/timestamp-authority/v2 from 2.0.3 to 2.0.6 in /example (#​4156)
• chore: Update openapi_operations.yaml (#​4157)
• feat: Remove Google App Engine standard support (#​4152)
• feat: Add DownloadCopilotMetrics helper method (#​4149)
• docs: Add apiVersion to GitHub API link (#​4147)
• chore: Simplify redundantptr custom linter (#​4148)
• docs: Deprecate old Copilot metrics endpoints closed on April 2, 2026 (#​4137)
• refactor: Remove redundant github.Ptr calls (#​4145)
• fix: Add missing User fields (#​4146)
• fix: Preserve Marketplace.Stubbed during client copy (#​4144)
• refactor: Simplify array copying (#​4143)
• build(deps): Bump golang.org/x/crypto from 0.49.0 to 0.50.0 in /example (#​4141)
• build(deps): Bump github.com/getkin/kin-openapi from 0.134.0 to 0.135.0 in /tools (#​4142)
• build(deps): Bump golang.org/x/term from 0.41.0 to 0.42.0 in /example (#​4140)
• build(deps): Bump golang.org/x/net from 0.52.0 to 0.53.0 in /scrape (#​4139)
• build(deps): Bump go.opentelemetry.io/otel to v1.43.0 (#​4135)
• fix: Expand sanitizeURL secrets redactions (#​4126)
• build(deps): Bump github.com/alecthomas/kong from 1.14.0 to 1.15.0 in /tools (#​4132)
• build(deps): Bump actions/setup-go from 6.3.0 to 6.4.0 in the actions group (#​4131)
• feat: Add support for custom names and methods that return structs with multiple []*T fields in gen-iterators.go (#​4128)
• fix: Limit webhook payload size in ValidatePayloadFromBody (#​4125)
• build(deps): Bump codecov/codecov-action from 5.5.3 to 6.0.0 (#​4123)
• fix: Synchronize requestCount in rate limit tests (#​4124)
• chore: Simplify generate.sh by removing git worktree and using generator-based check (#​4120)
• docs: Improve comments in /examples (#​4122)
• chore: Use golangci-lint-action; remove newreposecretwithlibsodium (#​4119)
• feat: Add custom image endpoints for GitHub-hosted runners (#​4101)
• chore: Cache custom golangci-lint binaries in GHA workflow (#​4116)
• build(deps): Bump github.com/ProtonMail/go-crypto from 1.4.0 to 1.4.1 in /example (#​4115)
• build(deps): Bump golang.org/x/tools from 0.29.0 to 0.43.0 in /tools/extraneous-new (#​4114)
• build(deps): Bump codecov/codecov-action from 5.5.2 to 5.5.3 (#​4112)
• build(deps): Bump github.com/golangci/plugin-module-register from 0.1.1 to 0.1.2 in /tools/extraneous-new (#​4113)
• build(deps): Bump github.com/getkin/kin-openapi from 0.133.0 to 0.134.0 in /tools (#​4111)
• build(deps): Bump github.com/PuerkitoBio/goquery from 1.11.0 to 1.12.0 in /scrape (#​4110)
• chore: Upgrade deps for linters using dependabot (#​4107)
• chore: Use structfield.Settings in check-structfield-settings (#​4108)
• build(deps): Bump google.golang.org/grpc from 1.78.0 to 1.79.3 in /example (#​4109)
• chore: Remove unnecessary use of new and &SomeStruct{} and add new extraneousnew custom linter (#​4106)
• feat: Add NetworkConfigurationID and HostedRunnersURL to enterprise runner group types (#​4099)
• feat: Generate accessors for all fields (#​4105)
• feat: Add ListRunnerGroupHostedRunners for org runner groups (#​4100)
• chore: Enable default: none linters; remove duplicated (#​4097)
• fix: Use Cursor pagination for *.ListHookDeliveriesIter (#​4096)
• chore: Remove duplicated formatters (#​4094)
• chore: Fix typos in comments and tests (#​4093)
• chore: Fix typo in CONTRIBUTING.md (#​4092)
• chore: Update openapi_operations.yaml (#​4091)
• build(deps): Bump github.com/bradleyfalzon/ghinstallation/v2 from 2.17.0 to 2.18.0 in /example (#​4084)
• chore: Bump go.opentelemetry.io/otel to v1.42.0 (#​4090)
• build(deps): Bump golang.org/x/crypto from 0.48.0 to 0.49.0 in /example (#​4081)
• build(deps): Bump golang.org/x/sync from 0.19.0 to 0.20.0 in /tools (#​4078)
• build(deps): Bump golang.org/x/net from 0.51.0 to 0.52.0 in /scrape (#​4079)
• test: Add fuzz test for ParseWebHook (#​4076)
• feat: Add enterprise budgets API (#​4069)
• feat: Add list organization fine-grained permissions (#​4072)
• feat: Make script/lint.sh output simpler to read (#​4073)
• chore: Speed up linting (#​4071)
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /otel (#​4065)
• build(deps): Bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in /otel (#​4068)
• build(deps): Bump go.opentelemetry.io/otel/exporters/stdout/stdouttrace from 1.40.0 to 1.41.0 in /example (#​4062)
• build(deps): Bump go.opentelemetry.io/otel/sdk from 1.40.0 to 1.41.0 in /example (#​4064)
• build(deps): Bump github.com/ProtonMail/go-crypto from 1.3.0 to 1.4.0 in /example (#​4063)
• feat: Add client_id field to App (#​4060)
• test: Simplify CopilotService tests (#​4058)
• test: Fix flaky TestDo_rateLimit_abuseRateLimitError_xRateLimitReset (#​4057)
• feat: Add support for enterprise audit log streaming API (#​4035)
• feat: Add repository-level immutable releases settings (#​4039)
• chore: Add SAS as a common initialism to structfield (#​4054)
• fix: Fix data race on Windows (#​4051)
• docs: Fix grammar in README.md (#​4053)
• chore: Simplify form value assertions in tests (#​4048)
• chore: Bump go-github from v83 to v84 in /scrape (#​4050)

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot.

[github-actions]

Release notes preview

Below is a preview of the release notes if your PR gets merged.

---

5.4.3 (2026-07-22)

Bug Fixes

• deps: update module github.com/google/go-github/v84 to v88 (6407766)

Code Refactoring

• fix lint issues (a286f9f)