Skip to content

chore(deps): roll up supernode grpc dependabot bumps - #326

Merged
a-ok123 merged 1 commit into
masterfrom
chore/dependabot-grpc-rollup
Sep 10, 2026
Merged

chore(deps): roll up supernode grpc dependabot bumps#326
a-ok123 merged 1 commit into
masterfrom
chore/dependabot-grpc-rollup

Conversation

@j-rafique

Copy link
Copy Markdown
Contributor

No description provided.

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The new govulncheck wrapper/workflow has a failure-mode where govulncheck/module errors can produce empty JSON and incorrectly pass, and the workflow invocation should not rely on executable file mode.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR rolls up a set of Go dependency updates (notably gRPC, OpenTelemetry, and golang.org/x/*) across the repo’s multiple Go modules, and tightens CI vulnerability scanning by introducing a govulncheck baseline wrapper that allowlists only explicitly reviewed, currently-unfixed reachable findings.

Changes:

  • Bump Go module dependencies across root, cmd/sncli, sn-manager, and tests/system (including google.golang.org/grpc to v1.83.2 and multiple golang.org/x/* updates).
  • Update go directives from 1.26.2 to 1.26.6 across modules.
  • Add scripts/govulncheck-baseline.sh and switch the govulncheck workflow to use it.
File summaries
File Description
go.mod Bumps Go version and core deps (grpc, genproto, x/*).
go.sum Updates checksums to match new root module dependency graph.
cmd/sncli/go.mod Bumps sncli module deps (grpc, x/*, genproto).
cmd/sncli/go.sum Updates checksums for sncli module dependency graph.
sn-manager/go.mod Bumps sn-manager module deps (grpc, x/*, genproto).
sn-manager/go.sum Updates checksums for sn-manager module dependency graph.
tests/system/go.mod Bumps systemtests module deps (grpc, x/*, genproto).
tests/system/go.sum Updates checksums for systemtests module dependency graph.
scripts/govulncheck-baseline.sh New wrapper to enforce an actionable govulncheck baseline/allowlist policy.
.github/workflows/govulncheck.yml Switches CI to run govulncheck via the new baseline wrapper across a module matrix.
Review details
  • Files reviewed: 6/10 changed files
  • Comments generated: 2
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread scripts/govulncheck-baseline.sh
Comment thread .github/workflows/govulncheck.yml Outdated
@j-rafique
j-rafique force-pushed the chore/dependabot-grpc-rollup branch from 9b7eb44 to fa9c53a Compare September 10, 2026 11:18
@a-ok123
a-ok123 merged commit 0625b6a into master Sep 10, 2026
23 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants