fix(deps): update go-minor-patch - #973
Conversation
|
Review the following changes in direct dependencies. Learn more about Socket for GitHub.
|
There was a problem hiding this comment.
The dependency update currently breaks compilation; details are inline.
Want to dig deeper?
Paste this into your agent to explore the findings from this review's Buildkite build:
Download the buildsworth logs from build 22888, then answer my questions about the findings.
Install the reading-buildsworth-logs skill to run this.
About buildsworth
Model: gpt-5.6-sol with xhigh thinking.
How to request a review: Comment @buildsworth-bk review on the PR, or request buildsworth-bk as a reviewer.
Risk labels (how buildsworth classifies risk) — buildsworth classifies risk itself from the diff. Unless repository policy already allows L2 approval, grant it by mentioning @buildsworth-bk (see approval ceiling and L2 approval grant):
- L1 — Low risk (dep bumps, docs/copy, lockfiles, small presentational fixes). buildsworth may approve by default.
- L2 — Standard risk (new UI, additive API fields, refactors). Approved only when repository policy or a verified grant allows it; otherwise comment-only.
- L3 — High risk (auth, migrations, payments, secrets, perf-critical pipeline paths). Human review always required.
| github.com/alecthomas/kong v1.16.1 | ||
| github.com/anmitsu/go-shlex v0.0.0-20200514113438-38f4b401e2be | ||
| github.com/buildkite/go-buildkite/v5 v5.12.0 | ||
| github.com/buildkite/go-buildkite/v5 v5.14.0 |
There was a problem hiding this comment.
Blocking: v5.13 removed BuildTest, BuildTestExecution, and BuildTestExecutionsCount, but the preflight package still uses them. The lint, test, and vulncheck jobs now all fail while loading the package with undefined: buildkite.BuildTest, so this revision cannot build. Please either keep v5.12.0 or migrate/remove those callers as part of the bump.
There was a problem hiding this comment.
Still open — v5.13.0 is still selected while the preflight package references the removed types, and build #3465 again fails lint, test, and vulncheck.
There was a problem hiding this comment.
Still open — v5.13.0 remains selected while cmd/preflight still references the removed types, and build #3467 again fails lint, test, and vulncheck.
4a182cf to
51762be
Compare
There was a problem hiding this comment.
The existing compilation concern is still open; the current Buildkite build fails the same three validation steps.
Want to dig deeper?
Paste this into your agent to explore the findings from this review's Buildkite build:
Download the buildsworth logs from build 22984, then answer my questions about the findings.
Install the reading-buildsworth-logs skill to run this.
51762be to
ea76f3c
Compare
There was a problem hiding this comment.
The existing compilation blocker remains open; no new findings this pass.
Want to dig deeper?
Paste this into your agent to explore the findings from this review's Buildkite build:
Download the buildsworth logs from build 23778, then answer my questions about the findings.
Install the reading-buildsworth-logs skill to run this.
|
With the help of Amp, I pushed up #974 which seems to fix these issues.. WDWT?! |
This PR contains the following updates:
v5.12.0→v5.13.0v1.11.8→v1.12.0Warning
Some dependencies could not be looked up. Check the Dependency Dashboard for more information.
Release Notes
buildkite/go-buildkite (github.com/buildkite/go-buildkite/v5)
v5.13.0Compare Source
jpillora/chisel (github.com/jpillora/chisel)
v1.12.0Compare Source
Chisel 1.12.0 is a reliability and security release focused on recovering
cleanly from network and configuration changes, making failures visible, and
hardening unauthenticated surfaces.
This stable release follows three public release candidates. No 1.12-specific
runtime regressions were reported after
rc3. The archive corruption reportedfor
rc1was fixed inrc2; release CI now integrity-tests every.gzand.zipbefore any asset or image is published.Highlights
x/crypto/ssh, bounding keepalive requests, and closing dead connectionspromptly (#608).
ConfigMap swaps. ACL changes apply to new tunnels without interrupting
established tunnels.
instead of presenting dead connections, and recovers UDP exit nodes after
reaching their flow limit.
behavior, configurable retry intervals, and
socks5://client proxy URLs.packet, validates auth strings, safely quotes untrusted usernames in logs,
and requires full fingerprints instead of accepting truncated legacy MD5
prefixes.
x/crypto/sshto v0.55.0 to addressGO-2026-6303, with release binaries
built using Go 1.27.0.
go installbuilds and adds useful info-levelsession, authentication, and ACL-denial logs.
opts, including terminal-awareformatting and reliable wrapping at narrow widths.
with CA roots for six architectures on Docker Hub and GHCR. Publishing the
draft release promotes
latest,1, and1.12without rebuilding them.Upgrading from 1.11.x
Four changes may require action:
--socks5and--authfile, users who should retain SOCKS5 access needan authfile entry matching
socks. The wildcard""continues to matcheverything.
--fingerprintmust use the full SHA256 fingerprint, or the full deprecated16-octet MD5 colon form. Truncated MD5 prefixes are rejected.
--authvalues must use<user>:<pass>; values without a colon now fail atstartup instead of silently disabling authentication.
--max-retry-countexits non-zero. Cancellation andnormal signal-driven shutdown still exit successfully.
The wire protocol remains
chisel-v3. Mixed 1.11.x/1.12 deployments continueto work, with new behavior degrading to the older peer's capabilities.
See Upgrading to 1.12 for
configuration details and the
full 1.12 review
for the complete compatibility analysis.
Configuration
📅 Schedule: (UTC)
* * * * 1-5)🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.