chore(deps): bump oapi-sdk-go to v3.12.2 to detect dead websocket connections

[dethan3]

Summary

lark-cli event consume can stay "connected" while receiving no events after a half-open websocket. oapi-sdk-go v3.7.2 sends pings but sets no read deadline or pong timeout, so the read loop blocks forever and never reconnects. Observed on 2026-10-16: the bus log showed no disconnect, yet zero events for about 70 minutes. Abnormal 1006 closes behind a local egress proxy looked similar to #2358.

The SDK fix is larksuite/oapi-sdk-go#224, merged in larksuite/oapi-sdk-go#244 (v3.11.0). This takes v3.12.2.

Changes

• Bump github.com/larksuite/oapi-sdk-go/v3 from v3.7.2 to v3.12.2.
• v3.12.2 no longer uses http.DefaultClient for websocket endpoint bootstrap. Pass the CLI's pinned client via larkws.WithHttpClient so proxy and platform policy still apply (event consume, event subscribe, mail watch).
• Record the SDK packages newly linked into the binary.

Test Plan

• go build ./...
• go vet ./...
• gofmt -l . clean
• go test -count=1 -timeout=8m ./internal/... (80 packages, 0 failed)
• golangci-lint v2.1.6 --new-from-rev=upstream/main and lintcheck against upstream/main
• A binary built with the SDK bump has been running in production

Related Issues

• ws: 长连接半死（休眠唤醒/静默断开）无法自愈——ReadMessage 缺 read deadline、pong 未用于活性检测 oapi-sdk-go#224
• fix(ws): make WebSocket client lifecycle cancellable oapi-sdk-go#244
• Similar symptom: event consume: websocket drops every 1-3 min; connection lifetimes are always exact multiples of 30s (server heartbeat kick?) #2358

Summary by CodeRabbit

• Bug Fixes
  • Improved Lark WebSocket connections by consistently using the configured HTTP client for their bootstrap requests.
• Chores
  • Updated the Lark Suite SDK to a newer version.

[CLAassistant]

Thank you for your submission! We really appreciate it. Like many open source projects, we ask that you sign our Contributor License Agreement before we can accept your contribution.
_{You have signed the CLA already but the status is still pending? Let us recheck it.}

[coderabbitai]

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

• Configuration used: defaults
• Review profile: CHILL
• Plan: Advanced
• Run ID: 3101a96f-8efc-40b2-97fc-ab608ca864d9

📥 Commits

Reviewing files that changed from the base of the PR and between 017b19a and ef7711b.

⛔ Files ignored due to path filters: 1

• go.sum is excluded by !**/*.sum

📒 Files selected for processing: 9

• go.mod
• internal/event/adapter/lark/websocket/feishu.go
• internal/qualitygate/deptest/testdata/import-surface-darwin.txt
• internal/qualitygate/deptest/testdata/import-surface-linux.txt
• internal/qualitygate/deptest/testdata/import-surface-windows.txt
• internal/transport/default_client.go
• internal/transport/extension_test.go
• shortcuts/event/subscribe.go
• shortcuts/mail/mail_watch.go

Included review availability: This review used your included allowance. Your plan provides up to 10 included reviews per hour; 9 remain after this review.

📝 Walkthrough

The Lark SDK dependency is upgraded. The transport package exposes its captured bootstrap HTTP client, and the Feishu, event subscription, and mail watch WebSocket clients pass that client to the SDK.

Changes: Lark WebSocket bootstrap client

Layer / File(s)	Summary
SDK version and import surface go.mod, internal/qualitygate/deptest/testdata/import-surface-*.txt	The Lark SDK dependency changes from v3.7.2 to v3.12.2. The Darwin, Linux, and Windows import-surface lists add SDK package entries.
Expose and test the bootstrap client internal/transport/default_client.go, internal/transport/extension_test.go	The transport package exposes the HTTP client captured from http.DefaultClient. Documentation and WebSocket bootstrap tests use that client with larkws.WithHttpClient.
Configure WebSocket clients internal/event/adapter/lark/websocket/feishu.go, shortcuts/event/subscribe.go, shortcuts/mail/mail_watch.go	The Feishu, event subscription, and mail watch WebSocket clients pass transport.SDKBootstrapHTTPClient() to the SDK.

Priority: ➖ Normal

Estimated code review effort: 2 (Simple) | ~15 minutes

Change: Bug fix

Merge Risk: ⚪ Minimal · up to ef771

The upgrade preserves dead-WebSocket detection and reconnect handling while routing bootstrap requests through the CLI's configured HTTP transport. No concrete behavior regression is evident, so the change appears ready to merge after normal checks.

Pre-merge checks: 4 · 1

Failed checks: 1 warning

Check name	Status	Explanation	Resolution
Docstring Coverage		Docstring coverage is 40.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 5 functions across 5 files. (4 skipped: 4…	Write docstrings for the functions missing them to satisfy the coverage threshold.

Passed checks: 4 passed

Check name	Status	Explanation
Title check		The title clearly identifies the dependency upgrade and its primary purpose: detecting dead WebSocket connections.
Description check		The description includes all required sections. It explains the motivation, lists the dependency and HTTP-client changes, documents test results, and references related issues.
Linked Issues check		Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check		Check skipped because no linked issues were found for this pull request.

Full details: Docstring Coverage

Explanation

Docstring coverage is 40.00% which is insufficient. The required threshold is 80.00%. Docstring coverage is scoped to functions touched by this diff. Analyzed 5 functions across 5 files. (4 skipped: 4 unsupported.)

Resolution

Write docstrings for the functions missing them to satisfy the coverage threshold.

• Fix all pre-merge checks with AI

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create a new PR

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}