Update baton-sdk to 0.7.13

[VVill-ga]

Update baton-sdk:

 go get github.com/conductorone/baton-sdk@v0.7.13
 go mod tidy
 go mod vendor
 go mod tidy

Need at least 0.7.9 for #135

Summary by CodeRabbit

• Chores
  • Upgraded Go toolchain to the latest patch version for optimal runtime performance.
  • Updated multiple dependencies including foundational libraries, monitoring components, and cloud integration packages to their latest stable versions.
  • These updates collectively improve platform stability, security coverage, and operational reliability.

[coderabbitai]

Walkthrough

Go toolchain updated from 1.25 to 1.25.2, with significant dependency version bumps including baton-sdk (v0.4.8 → v0.7.13), various protocol buffer, cryptography, and monitoring components. Multiple transitive dependency upgrades across AWS SDK, gRPC, and OpenTelemetry ecosystems.

Changes

Cohort / File(s)	Summary
Go Module Dependencies go.mod	Toolchain version bump from go 1.25 to go 1.25.2. Direct dependency upgrades: baton-sdk v0.4.8 → v0.7.13, go.uber.org/zap v1.27.0 → v1.27.1, google.golang.org/protobuf v1.36.5 → v1.36.10. Numerous transitive dependency updates across AWS SDK, gRPC, OpenTelemetry, cryptography (x/crypto), networking (x/net), OAuth2 (x/oauth2), synchronization (x/sync), and system packages (x/sys, x/text).

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Poem

🐰 Hops through versions with delight,
Dependencies polished, shining bright,
From SDK springs to crypto flows,
Where modern Go library grows!
One-point-two-five-point-two takes flight! 🚀

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title directly reflects the main change: updating baton-sdk to version 0.7.13, which is clearly the primary objective of this PR.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Post copyable unit tests in a comment
• Commit unit tests in branch willgarrison/batonsdk-0.7.13

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[coderabbitai]

Actionable comments posted: 1

🤖 Fix all issues with AI agents

In `@go.mod`:
- Line 6: Update the go.mod dependency for github.com/conductorone/baton-sdk to
a valid release or a commit hash: replace the non-existent version "v0.7.13"
with "v0.7.12" (the latest published release) or, if you need a pre-release,
switch the module version to an explicit pseudo-version/commit reference (e.g.,
git commit pseudo-version) for github.com/conductorone/baton-sdk so Go tooling
can resolve the dependency.

[coderabbitai]

⚠️ Potential issue | 🔴 Critical

🧩 Analysis chain

🌐 Web query:

conductorone baton-sdk v0.7.13 release notes changelog breaking changes

💡 Result:

As of February 4, 2026, there is no baton-sdk v0.7.13 published by ConductorOne. The highest published version shown in the module’s version list is v0.7.12 (released Feb 2, 2026). [1]

Latest available release notes (v0.7.12)

v0.7.12 (Feb 2, 2026) “What’s Changed” includes: [2]

• Upgrade gRPC from v1.71.0 → v1.78.0 and OpenTelemetry from v1.35.0 → v1.39.0
• Upgrade AWS SDK from v1.36.3 → v1.41.0 and smithy-go from v1.22.2 → v1.24.0
• “[DUCT-13790] support listing events”
• Full compare link: v0.7.11…v0.7.12

Breaking changes

No breaking changes are called out in the v0.7.12 release notes. [2]

---

Sources

[1] Go package version list for github.com/conductorone/baton-sdk (pkg.go.dev)
[2] GitHub release notes for ConductorOne/baton-sdk v0.7.12 (github.com)

Citations:

• 1: https://pkg.go.dev/github.com/conductorone/baton-sdk?tab=versions
• 2: https://github.com/ConductorOne/baton-sdk/releases/tag/v0.7.12

---

🏁 Script executed:

cd /tmp && find . -name "go.mod" -type f 2>/dev/null | head -5

Repository: ConductorOne/baton-okta

Length of output: 49

---

🏁 Script executed:

find . -name "go.mod" -type f | head -10

Repository: ConductorOne/baton-okta

Length of output: 75

---

🏁 Script executed:

cat -n go.mod | head -20

Repository: ConductorOne/baton-okta

Length of output: 842

---

Replace baton-sdk v0.7.13 with v0.7.12 or use an explicit commit reference.

The version v0.7.13 does not exist in the published baton-sdk releases. The highest available version is v0.7.12 (released Feb 2, 2026). This dependency specification will fail. Either update to v0.7.12 (which contains no breaking changes from recent versions) or switch to a specific commit if v0.7.13 is an intentional pre-release.

🤖 Prompt for AI Agents

In `@go.mod` at line 6, Update the go.mod dependency for
github.com/conductorone/baton-sdk to a valid release or a commit hash: replace
the non-existent version "v0.7.13" with "v0.7.12" (the latest published release)
or, if you need a pre-release, switch the module version to an explicit
pseudo-version/commit reference (e.g., git commit pseudo-version) for
github.com/conductorone/baton-sdk so Go tooling can resolve the dependency.

[btipling]

tons of conflicts in vendor and failing tests though that need to be fixed.

[gontzess]

Hey, we now use baton-admin for baton-sdk version bumps. If there other sdk related changes needed like interface changes then PRs are cool too

This repo was recently bumped via baton-admin so take a peek at main: https://github.com/ConductorOne/baton-okta/blob/main/go.mod#L6

[VVill-ga]

Ah, thank you @gontzess!