Generated children inherited the vulnerable set via pkg/litellm/telemetry.go.
otel/log + sdk/log + otlploghttp v0.21.0 is the set consistent with otel
v1.45.0; ADK v1.2.0 does not compile against it, so ADK moves to v1.7.0.
Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Template shipped with no go.sum and an unchecked resp.Body.Close(),
both failing `task check` (golangci-lint errcheck) on every push since
bootstrap -- every repo generated from this template inherited the same
red CI. go.sum generated via `go mod tidy`; Close() error explicitly
discarded (best-effort cleanup, nothing actionable to do with it).