Bump hey-sdk to v0.30.0

[jeremy]

Summary

Pins hey-sdk v0.30.0 (go/v0.30.0, 9b16fc7).

What it brings the CLI:

• Draft sends and edits that HEY rejects with a 422 now surface the validation message instead of a bare "validation error", and a draft edit that fails no longer reads as applied (fix: surface 422 validation error messages in SendDraft and UpdateDraft hey-sdk#133). Closes hey draft send always fails with bare "validation error" (HTTP 422 body discarded); draft edit 422s but applies anyway #350.
• Also in the release, not yet called here: the workflow stage reader (Add workflow stage reader hey-sdk#141), generated operation retry policies (Honor per-operation retry policies in the generated client hey-sdk#94), Retry-After rounding (Round a Retry-After date up to the whole second hey-sdk#151), and the Rust SDK (Rust SDK hey-sdk#145).

Alongside the pin:

• internal/mcpserver/model/ resynced from go/v0.30.0 via make update-mcp-model: PROVENANCE moves to 9b16fc7, and the model gains GetWorkflowStage under the Workflows tag, which the catalog already pins as unmapped, so TestCatalogUnmappedTagsArePinned is unchanged.
• github.com/oapi-codegen/runtime v1.6.0 → v1.7.0 (indirect, pulled by the SDK).
• nix/package.nix vendorHash recomputed with make update-nix-hash and verified by a full Nix build.

Test plan

• make check (fmt, vet, lint, unit tests, tidy, surface, release lockstep)
• make update-nix-hash built the flake against the new go.sum
• go.mod carries a single github.com/basecamp/hey-sdk/go v0.30.0 requirement and no replace

---

Summary by cubic

Pins hey-sdk from v0.29.0 to v0.30.0, so draft sends and edits HEY rejects with a 422 now surface the validation message instead of a bare "validation error", and a failed draft edit no longer reads as applied.

Changes

• The MCP model resyncs to go/v0.30.0, adding GetWorkflowStage under the Workflows tag, which the catalog already pins as unmapped.
• github.com/oapi-codegen/runtime bumps to v1.7.0 as an indirect dependency.
• nix/package.nix vendorHash is recomputed via make update-nix-hash and verified with a full Nix build.
• Other SDK additions like the workflow stage reader and retry policy fixes are not called by the CLI yet.

^{Written for commit 5e34a4f. Summary will update on new commits.}

[chatgpt-codex-connector]

Codex Review Summary

This comment shows the latest Codex review activity on this pull request.

Review	Status	Commit	Review trigger
📝 Code Review	✅ Completed 2026-09-10T05:58:42.375317Z	5e34a4f	PR opened

ℹ️ About Codex in GitHub

Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you

• Open a pull request for review
• Mark a draft as ready
• Comment "@codex review" or "@codex security review".

Codex reacts with 👀 while any review is running, comments if it has suggestions, and reacts with 👍 once all reviews finish with no findings.

[Copilot]

🟢 Approval recommended

The changes are a straightforward dependency/model snapshot bump with no local behavioral logic modifications in hey-cli beyond the expected version pin updates.

Pull request overview

This PR updates hey-cli’s HEY SDK dependency to github.com/basecamp/hey-sdk/go v0.30.0 and resyncs the embedded MCP OpenAPI/behavior model snapshot to match the new SDK release, plus updates the Nix vendor hash for reproducible builds.

[!TIP]
If you aren't ready for review, convert to a draft PR.
Click "Convert to draft" or run gh pr ready --undo.
Click "Ready for review" or run gh pr ready to reengage.

Changes:

• Bump github.com/basecamp/hey-sdk/go from v0.29.0 → v0.30.0 (and refresh go.sum).
• Resync internal/mcpserver/model/* (OpenAPI + behavior model + provenance) to go/v0.30.0.
• Update Nix vendorHash to match the new module graph.

File summaries

File	Description
nix/package.nix	Updates vendorHash for Nix builds after the dependency bump.
internal/mcpserver/model/PROVENANCE.json	Updates provenance to the hey-sdk go/v0.30.0 commit.
internal/mcpserver/model/openapi.json	Resynced OpenAPI snapshot; includes new/updated operation and schema metadata.
internal/mcpserver/model/behavior-model.json	Resynced behavior model (retry/pagination metadata, new operation entry).
go.mod	Pins hey-sdk to v0.30.0 and updates indirect oapi-codegen/runtime to v1.7.0.
go.sum	Records new module checksums corresponding to the updated dependencies.

Review details

• Files reviewed: 5/6 changed files
• Comments generated: 1
• Review effort level: Lite

---

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.