[dependabot]

Bumps the go-dependencies group with 1 update: github.com/basecamp/basecamp-sdk/go.

Updates github.com/basecamp/basecamp-sdk/go from 0.24.0 to 0.25.0

Release notes

Sourced from github.com/basecamp/basecamp-sdk/go's releases.

Basecamp SDK v0.25.0

Upgrading

Read MIGRATING.md before you bump the version — it lists the breaks a clean build will not catch: the silent ones that change behaviour with no error at all, and the ones that compile and then raise or fail to decode on one particular shape of response.

The notes below are generated from merged pull requests, so a change that merged without one cannot appear in them — MIGRATING.md records consumer-visible changes regardless of how they merged.

Installation

Go

go get github.com/basecamp/basecamp-sdk/go@v0.25.0

TypeScript

npm install @37signals/basecamp@0.25.0

Ruby

gem install basecamp-sdk -v 0.25.0

Swift

.package(url: "https://github.com/basecamp/basecamp-sdk.git", from: "0.25.0")

Kotlin

implementation("com.basecamp:basecamp-sdk:0.25.0")

Requires the GitHub Packages repository and a token — see Kotlin installation.

Python

pip install basecamp-sdk==0.25.0

Rust

cargo add basecamp-sdk@0.25.0

What's Changed

⚠️ Breaking Changes

... (truncated)

Commits

• 35f3d72 Bump SDK version to 0.25.0 (#992)
• 0b3283d Correct column move, question update, lineup marker, project timesheet and ev...
• d3a4f15 Go: return an empty list, not nil, when a listing has no items (#990)
• a509c6e Call GetMyNotifications' result notifications, not the Hey! menu (#988)
• 0e42d88 Wait for a reviewer before tagging the Go module and publishing Kotlin (#975)
• dbddecf Patch rustls and move to Go 1.26.9 for new security advisories (#989)
• a2df4e5 deps(conformance-rust): bump the conformance-cargo-dependencies group (#987)
• 2ac03a1 deps(rust): bump serde_json in /rust in the serde group (#985)
• bc1801f deps(rust): bump toml in /rust in the cargo-dependencies group (#986)
• 4e3f021 deps(rust): bump tokio in /rust in the tokio-ecosystem group (#984)
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Bumps github.com/basecamp/basecamp-sdk/go from 0.24.0 to 0.25.0 and refreshes the Nix vendorHash to match the new locked modules in go.sum.

v0.25.0 includes breaking changes, including silent behavior changes a clean build won't catch. Review the upstream release notes and MIGRATING.md before merging.

^{Written for commit 8285f84. Summary will update on new commits.}

[Copilot]

🟡 Changes recommended

Embedded SDK provenance remains at v0.24.0, causing the required provenance check to fail.

1 open issue

• Update SDK provenance metadata to v0.25.0 · New

What changed in this PR

Updates the CLI’s Basecamp SDK dependency from v0.24.0 to v0.25.0.

Changes:

• Selects SDK v0.25.0 in go.mod.
• Updates the corresponding module checksums.

[!TIP]
If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

File	Description
go.sum	Updates SDK checksums to v0.25.0.
go.mod	Bumps the SDK dependency to v0.25.0.

_{Review effort: Balanced}

[Copilot]

🔵 Needs a closer look

SDK provenance still records v0.24.0, conflicting with the updated dependency and required CI provenance check.

1 open issue

• Update SDK provenance metadata to v0.25.0

_{Review effort: Balanced}