chore(deps): upgrade all dependencies and Go (1.26)#408
Merged
Conversation
Consolidates the open Dependabot PRs into a single upgrade:
Go modules:
- charm.land/bubbletea/v2 2.0.2 -> 2.0.6
- charm.land/lipgloss/v2 2.0.2 -> 2.0.3
- github.com/mark3labs/mcp-go 0.47.1 -> 0.50.0
- github.com/onsi/ginkgo/v2 2.28.1 -> 2.29.0
- github.com/onsi/gomega 1.39.0 -> 1.40.0
- golang.org/x/{crypto,net,sync,text} and transitive deps
CI actions:
- actions/checkout v6 -> v7
- codecov/codecov-action v6 -> v7
Docker:
- golang 1.26.1-bookworm -> 1.26.4-bookworm
Docs (npm):
- wrangler ^4.86.0 -> ^4.103.0 (bumps undici 7.24.8 -> 7.28.0)
Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
The "^1.25" constraint now resolves to go1.26, but golangci-lint's prebuilt binaries are still built with go1.25 and panic when analyzing go1.26-compiled packages. Pin to the 1.25.x series to match go.mod's go 1.25.8 directive and the prebuilt linter. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com>
Codecov Report✅ All modified and coverable lines are covered by tests. 📢 Thoughts on this report? Let us know! |
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Consolidates the open Dependabot PRs (#394–397, #399–405) into a single reviewable/mergeable commit.
Changes
Go modules
charm.land/bubbletea/v22.0.2 → 2.0.6charm.land/lipgloss/v22.0.2 → 2.0.3github.com/mark3labs/mcp-go0.47.1 → 0.50.0github.com/onsi/ginkgo/v22.28.1 → 2.29.0github.com/onsi/gomega1.39.0 → 1.40.0golang.org/x/{crypto,net,sync,text}+ transitive (sys,term,mod,tools)CI actions
actions/checkoutv6 → v7 (all workflows)codecov/codecov-actionv6 → v7Docker
golang1.26.1-bookworm → 1.26.4-bookwormDocs (npm)
wrangler^4.86.0 → ^4.103.0 (cascadesundici7.24.8 → 7.28.0) — taken verbatim from Dependabot chore: Bump undici from 7.24.8 to 7.28.0 in /docs in the npm_and_yarn group across 1 directory #399Validation
go build ./..., unit tests (-race -tags=unit), and e2e tests (-race -tags=e2e) all passgo mod verifyclean; no uncommitted generated diffsNote
golangci-lintpanics locally because 2.7.2 is built with go1.25 while the toolchain is go1.26 — this is pre-existing (reproduces on cleanmain) and not introduced here. Bumping the pinned golangci-lint to a go1.26 build is worth a follow-up.Once merged, Dependabot PRs #394–397 and #399–405 can be closed.
🤖 Generated with Claude Code