Update go deps - #926
Conversation
c7bd97b to
3b6fb55
Compare
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
3b6fb55 to
481a238
Compare
481a238 to
7dc8348
Compare
7c4c1ae to
69c84b2
Compare
9320724 to
1bb9957
Compare
b6ef8f8 to
6629bb0
Compare
926a91b to
e62a32b
Compare
![devin-ai-integration[bot]](https://avatars.githubusercontent.com/in/811515?s=60&v=4){kind=small}
| module github.com/livekit/server-sdk-go/v2 | ||
|
|
||
| go 1.26 | ||
| go 1.26.3 |
There was a problem hiding this comment.
🟡 Library now demands a newer Go release than the project's own build machines install
The minimum Go release for this library was raised to a specific patch release (go 1.26.3 in go.mod:3) while the automated build machines are still set up with 1.26.0 (.github/workflows/buildtest.yaml:50, .github/workflows/test-api.yml:49), so builds must fetch an extra toolchain at build time or fail outright when that fetch is disabled.
Impact: Users and CI environments pinned to an older or offline Go setup can no longer build the SDK.
Go directive bump vs. pinned CI toolchain and downstream consumers
Renovate bumped the go directive from 1.26 to 1.26.3. Because there is no toolchain line, Go with the default GOTOOLCHAIN=auto will silently download the 1.26.3 toolchain — but with GOTOOLCHAIN=local (common in hermetic/offline builds) the build fails with "go.mod requires go >= 1.26.3". Both workflows install Go 1.26.0 explicitly, so CI now relies on the implicit toolchain download. Additionally, as this is a published library, every downstream consumer inherits this stricter minimum patch-level requirement.
| go 1.26.3 | |
| go 1.26 |
Was this helpful? React with 👍 or 👎 to provide feedback.
Generated by renovateBot
e62a32b to
db48faa
Compare
This PR contains the following updates:
v0.30.0→v0.32.0v0.53.0→v0.54.0v0.21.0→v0.22.0v1.82.1→v1.83.0Release Notes
moby/buildkit (github.com/moby/buildkit)
v0.32.0Compare Source
Welcome to the v0.32.0 release of buildkit!
Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.
Contributors
Notable Changes
oci-artifacts=falseif your registry does not support OCI artifacts. #6914OTEL_TRACE_PARENT,OTEL_TRACE_STATEare no longer supported. UseTRACEPARENTandTRACESTATEinstead. #6874OTEL_IGNORE_ERRORenvironment variable. #6966Dependency Changes
ad3df93d5411a9->856be88fc52b72-> v0.3.55d098a2-> v2.3.030cd4fc->6d9dc2ef2248acPrevious release can be found at v0.31.2
v0.31.2Compare Source
Welcome to the v0.31.2 release of buildkit!
This is a security patch release with four moderate and one low severity security fixes.
Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.
Contributors
Notable Changes
/tmpdirectory contents. GHSA-32pv-7hq5-qhwqDependency Changes
0257b33->30cd4fcPrevious release can be found at v0.31.1
v0.31.1Compare Source
buildkit 0.31.1
Welcome to the v0.31.1 release of buildkit!
This is a security patch release with two low severity security fixes.
Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.
Contributors
Notable Changes
Dependency Changes
This release has no dependency changes
Previous release can be found at v0.31.0
v0.31.0Compare Source
buildkit 0.31.0
Welcome to the v0.31.0 release of buildkit!
Please try out the release binaries and report any issues at
https://github.com/moby/buildkit/issues.
Contributors
Notable Changes
mode=deleteattribute which will replace the destination directory with the contents of the build result instead of merging it. Similar to the--deleteflag in rsync. #6561 #6864state.Requires()client helper can be used to define such dependencies in the build graph. #6829oci-mediatypes=falsecan be used for legacy Docker media types. This change raises the compatibility version of BuildKit v0.31.0 to 30. #6824resetoption to clear the unreferenced existing cache. #6612buildctlcompletion scripts flag--generate-bash-completionis no longer supported and has been replaced with--generate-shell-completion. #6848Dependency Changes
f64d9cf->545e8a4a39d601->d5411a9fc52b725d098a2a2aa163->0257b33404c0d5-> v0.1.1a2c0da2newdf92998->055de636f92a3b->3dc84a46f92a3b->3dc84a4Previous release can be found at v0.30.0
grpc/grpc-go (google.golang.org/grpc)
v1.83.0: Release 1.83.0Compare Source
Security
GRPC_GO_EXPERIMENTAL_CONTROL_BUFFER_THROTTLE_LIMIT.MetadataandRequestedServerNamepermissions matcher fields. If present in a DENY rule, previously these would be ignored and fail-open.NotRule/NotIdpermissions.source_ipprincipal identifier by treating it as equivalent todirect_remote_ip.exact_match,prefix_match, orsuffix_matchstrings. (#9223)New Features
force-xdstarget URI query parameter. (#9133)OnPolicyUpdatecallback toFileWatcherOptionsto notify when an authz policy is loaded or updated. (#9142)GRPC_EXPERIMENTAL_XDS_GCP_AUTHENTICATION_FILTER=true. (#9119)GRPC_EXPERIMENTAL_XDS_HTTP_CONNECT=true. (#9151)contains_matchin route header matchers. (#9223)Bug Fixes
GOOS=plan9), broken since v1.81.0. (#9255)Configuration
📅 Schedule: (UTC)
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.