chore(deps): bump the go-minor-and-patch group across 1 directory with 2 updates

[dependabot]

Bumps the go-minor-and-patch group with 2 updates in the / directory: github.com/stretchr/testify and github.com/urfave/cli/v3.

Updates github.com/stretchr/testify from 1.12.0 to 1.12.1

Release notes

Sourced from github.com/stretchr/testify's releases.

v1.12.1

This is the first release which has the minimum dependencies practical in testify v1. The last remaining dependencies are github.com/stretchr/objx which itself has no dependencies, and go.yaml.in/yaml/v3. Removing objx would require v2, it cannot be vendored. Removing YAML would require vendoring the yaml library, which would do more harm than good. It's better to become aware of vulnerabilities in the official yaml package than to attempt to maintain our own.

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

What's Changed

• Change yaml library to go.yaml.in/yaml/v3 by @​harryzcy in stretchr/testify#1935
• change yaml library to go.yaml.in/yaml/v3 by @​boekkooi-impossiblecloud in stretchr/testify#1772

New Contributors

• @​harryzcy made their first contribution in stretchr/testify#1935
• @​boekkooi-impossiblecloud made their first contribution in stretchr/testify#1772

Full Changelog: stretchr/testify@v1.12.0...v1.12.1

Commits

• 959dbda Merge pull request #1935 from harryzcy/yaml-update
• 9bb7176 Update go.yaml.in/yaml/v3 to v3.0.5
• 0358d0e change yaml library to go.yaml.in/yaml/v3
• See full diff in compare view

Updates github.com/urfave/cli/v3 from 3.10.1 to 3.11.0

Release notes

Sourced from github.com/urfave/cli/v3's releases.

v3.11.0

What's Changed

• fix: correct a typo in the help message for the powershell autocompletion by @​suzuki-shunsuke in urfave/cli#2383
• Escape backslashes in fish completion descriptions by @​mahirhir in urfave/cli#2378
• chore(deps): bump actions/setup-go from 6 to 7 by @​dependabot[bot] in urfave/cli#2389
• chore(deps): bump mkdocs-material from 9.7.6 to 9.7.7 in the python-packages group by @​dependabot[bot] in urfave/cli#2391
• chore(deps): bump actions/setup-python from 6 to 7 by @​dependabot[bot] in urfave/cli#2390
• fix: skip all hidden flags in shell completion, not just bool flags by @​vidigoat in urfave/cli#2388
• Fix nil pointer dereference for interface-typed flag values by @​mrueg in urfave/cli#2400
• Fix index out of range panic when Run is given no arguments by @​mrueg in urfave/cli#2401
• fix: honor BoolWithInverseFlag DefaultText by @​fzlzjerry in urfave/cli#2403
• Fix Issue #2385 by @​BrandonIrizarry in urfave/cli#2386
• fix: inherit HideHelpCommand in subcommands by @​utkarshalpha in urfave/cli#2395
• test: cover Run-with-no-arguments paths (#2406) by @​dearchap in urfave/cli#2407
• test: add shell-completion case for hidden BoolWithInverseFlag by @​dearchap in urfave/cli#2408
• test: fix ineffective mutex error-string assertion and add mirror cases by @​dearchap in urfave/cli#2410

New Contributors

• @​mahirhir made their first contribution in urfave/cli#2378
• @​vidigoat made their first contribution in urfave/cli#2388
• @​fzlzjerry made their first contribution in urfave/cli#2403
• @​BrandonIrizarry made their first contribution in urfave/cli#2386
• @​utkarshalpha made their first contribution in urfave/cli#2395

Full Changelog: urfave/cli@v3.10.1...v3.11.0

Commits

• 138d3b3 Merge pull request #2410 from dearchap/issue_2404
• 1bee208 test: fix ineffective mutex error-string assertion and add mirror cases
• 5ec7335 Merge pull request #2408 from urfave/issue_2405
• cccd133 Merge branch 'main' into issue_2405
• 493a0d3 test: add shell-completion case for hidden BoolWithInverseFlag
• 141d89c Merge pull request #2407 from dearchap/issue_2406
• 9eee563 test: cover Run with no args, empty name, and shell completion
• 79f8fc7 Merge pull request #2395 from utkarshalpha/fix/hide-help-command-inheritance
• 8f56e7f Merge branch 'main' into fix/hide-help-command-inheritance
• 339a375 Merge pull request #2386 from BrandonIrizarry/bci
• Additional commits viewable in compare view

[github-actions]

Castiron custom code

✅ No new custom-code files detected.

5 mixed files remain; 0 existing customizations changed.

Compared 1048593bafed → dd334af3e0de. Generated baselines verified.

5 existing customizations unchanged

• pkg/cmd/adminorganizationcertificate.go
• pkg/cmd/cmd.go
• scripts/castiron/README.md
• scripts/castiron/custom_code_report.py
• scripts/castiron/test_custom_code_report.py

A changed generated baseline means this report cannot reliably identify which handwritten lines changed.

Inspect the custom-code diff

Download the exact patch produced by this run (requires repository access):

gh run download 34105952038 --repo openai/openai-cli \
  --name castiron-custom-code-34105952038-1 --dir /tmp/castiron-custom-code-34105952038-1
git apply --stat /tmp/castiron-custom-code-34105952038-1/custom-code.patch
cat /tmp/castiron-custom-code-34105952038-1/custom-code.patch

Or reproduce it from an SDK checkout containing the vendored reporter:

git fetch --no-tags origin 1048593bafed0651612f770a831cd69ffb5a2c22 dd334af3e0de539b7a2fa438c0ef098fa484c251
python3 scripts/castiron/custom_code_report.py report \
  --base 1048593bafed0651612f770a831cd69ffb5a2c22 \
  --head dd334af3e0de539b7a2fa438c0ef098fa484c251 --fetch --require-head-hash --public \
  --out /tmp/castiron-custom-code-dd334af3e0de
cat /tmp/castiron-custom-code-dd334af3e0de/custom-code.patch

This is the current full custom patch for mixed files, not an attribution of only the handwritten lines changed by this PR.

Full report and patch

[markstuart-oai]

@codex review

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-06T01:32:49.864414Z	63817c2	Manual request
🔒 Security Review	✅ Completed 2026-09-06T01:33:53.100575Z	63817c2	Manual request

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[chatgpt-codex-connector]

Codex Review: Didn't find any major issues. 👍

Reviewed commit: 63817c2739

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review".

If Codex has suggestions, it will comment; otherwise it will react with 👍.

Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".

[chatgpt-codex-connector]

Security review completed. No security issues were found in this pull request.

Reviewed commit: 63817c2739

View security finding report

Only the user who started this review can view the report in Codex.

ℹ️ About Codex security reviews in GitHub

This is an experimental Codex feature. Security reviews are triggered when:

• You comment "@codex security review"
• A regular code review gets triggered (for example, "@codex review" or when a PR is opened), and you’re opted in so security review runs alongside code review

Once complete, Codex will leave suggestions, or a comment if no findings are found.