build(deps): Bump github.com/maximhq/bifrost/core from 1.7.0 to 1.7.2 in /authbridge/authlib

[dependabot]

Bumps github.com/maximhq/bifrost/core from 1.7.0 to 1.7.2.

Release notes

Sourced from github.com/maximhq/bifrost/core's releases.

Core v1.7.2

Core Release v1.7.2

• feat: added ChatGPT passthrough support to the OpenAI provider
• feat: added user-agent tracking schemas with custom user-agent mapping
• feat: MCP tool execution plugin pipeline improvements

Installation

go get github.com/maximhq/bifrost/core@v1.7.2

---

This release was automatically created from version file: core/version

Core v1.7.1

Core Release v1.7.1

• feat: add Sarvam AI provider with chat, text-to-speech, and speech-to-text support (thanks @​Purvi09!)
• feat: add ElevenLabs sound effects (text-to-sound) support (thanks @​SecretSun!)
• feat: add ProjectID to Bedrock and Bedrock Mantle key configs with per-alias overrides for Bedrock, Bedrock Mantle, and Vertex
• feat: add additional_tools message type support
• feat: force single-region config in Vertex key config
• feat: phase-scoped redaction and revealing with transient redaction data field, plus ClearPausedStreamBuffer for pause-accumulate stream flows
• fix: map web search options to Google Search grounding in the Gemini API
• fix: parse SecretVar JSON with ref/env_var fields even when value is absent
• fix: cap max reasoning effort in OpenAI
• fix: honor service tier in OpenAI chat completion
• fix: support GA transcription-type sessions in POST /v1/realtime/client_secrets (thanks @​Shaik-Sirajuddin!)
• fix: support diarized_json transcription segments and ElevenLabs speaker passthrough (thanks @​Shaik-Sirajuddin!)
• fix: sanitize tool_use/tool_result ids to Anthropic's charset (thanks @​Shaik-Sirajuddin!)
• fix: never persist masked provider key previews (thanks @​eyeveil!)
• fix: make tracing span lookup nil-safe to prevent panic on streaming errors (thanks @​eyeveil!)
• fix: enable rerank for custom OpenAI-compatible providers (thanks @​eyeveil!)
• fix: forward and rebuild Anthropic server-side tool_search on the Responses path (thanks @​ws4charlie!)
• fix: zero pooled ChannelMessage references on release to avoid pinning request bodies (thanks @​citrocat!)
• fix: round-trip Anthropic redacted_thinking blocks on the responses surface so multi-turn tool use with redacted reasoning can be replayed (thanks @​fus3r!)
• fix: reset HasEmittedWebSearch when recycling pooled Gemini responses stream state so grounded streaming requests keep emitting web_search_call items (thanks @​fus3r!)
• fix: omit role from OpenAI Responses non-message items (thanks @​nettee!)
• fix: serialize OpenAI compaction request input correctly (thanks @​mcclurmc!)
• fix: preserve reasoning_config on Bedrock cross-provider translation (thanks @​Purvi09!)
• fix: preserve Gemini file upload MIME types for GenAI file URI completions
• fix: Gemini video reference fields map to instances (thanks @​vojthor!)
• fix: accept object-valued tool-call arguments (e.g. tool_search_call) on the Responses API streaming path
• fix: recover from idle-timeout timer-goroutine panic that could crash the process
• fix: deterministic MCP tool ordering for prompt cache stability
• fix: pass through gs:// image URLs on Vertex Gemini
• fix: signal Bedrock max_output_tokens truncation on Responses API (thanks @​jeremym-tanium!)
• fix: warn callers not to truncate the #t= temp-token fragment on MCP inline-auth links (thanks @​MarcusPeng!)

... (truncated)

Commits

• 4cfbd36 framework fixes (#5285)
• 3bc7242 fix tag fetches (#5284) --skip-ci
• 6523ab5 prerelease 2 (#5283)
• 82453f8 updates go mods (#5275)
• bd6c0fa mod fixes (#5127)
• c7abef3 readme changes (#5115)
• 748fecc adds legacy table fix (#5082)
• 28f6fa7 compilation fixes (#5050)
• 5390e75 compilation fix
• 559d337 Adds changelog for v2.0.0-prerelease1 --skip-ci
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)