- Raised the `go` directive from 1.24.1 to 1.26.5 to satisfy pgx/v5 and ollama's minimum Go version requirements and to pick up 15 patched standard library CVEs.
- Updated `pgx/v5`, `otel`/`otel/sdk`/`otlptracehttp`, `x/net`, and the AWS `eventstream` protocol package to their latest requested versions.
- Remediated govulncheck-flagged CVEs in `grpc`, `x/text`, `x/crypto`, `antchfx/xpath`, AWS SDK `bedrock*`/`s3` services, `etcd/server`, and `mongo-driver` v1/v2.
- Fixed ollama's `MainGPU` API type change (`int` -> `*int`) in `llms/ollama/options.go` without breaking the public `WithRunnerMainGPU` signature.
Add a single WithStructuredOutput(StructuredOutputConfig) call option
carrying a raw JSON Schema (Draft 2020-12), so one contract yields the
same guarantee — a normal-final response is a single JSON value matching
the schema — on OpenAI, Anthropic, Bedrock (Converse and legacy), Google
AI, Vertex, and Ollama. Each provider maps it to its native mechanism;
the result is validated locally against the original schema in the new
llms/structuredoutput package. Also fixes a latent Converse gap where the
response stop reason was never surfaced on ContentChoice.StopReason.
Dmitry Ng