Skip to content

update dependencies to latest versions in go.mod and go.sum#117

Merged
yeswanth2420 merged 1 commit into
developfrom
snykFixesOverride
May 4, 2026
Merged

update dependencies to latest versions in go.mod and go.sum#117
yeswanth2420 merged 1 commit into
developfrom
snykFixesOverride

Conversation

@yeswanth2420
Copy link
Copy Markdown
Contributor

This pull request updates several dependencies in the go.mod file, focusing on keeping the codebase up to date with the latest versions and improving compatibility and security. The most important changes are grouped below:

Dependency version upgrades:

  • Upgraded github.com/rdkcentral/xconfwebconfig to v0.0.0-20260501170741-de55e77db887 for new features and bug fixes.
  • Updated github.com/google/go-cmp to v0.7.0, github.com/stretchr/testify to v1.11.1, and google.golang.org/protobuf to v1.36.11 for improved testing and protobuf support.
  • Upgraded several indirect dependencies, including github.com/cenkalti/backoff/v5, github.com/cespare/xxhash/v2, github.com/go-logr/logr, and github.com/grpc-ecosystem/grpc-gateway/v2, to their latest versions for enhanced performance and compatibility.

OpenTelemetry and related libraries:

  • Replaced and upgraded OpenTelemetry dependencies to v1.43.0 and added go.opentelemetry.io/auto/sdk v1.2.1, ensuring better observability and tracing support.

Other dependency updates:

  • Updated various golang.org/x/* and google.golang.org/* libraries to newer versions, improving security and compatibility.

Co-authored-by: Copilot <copilot@github.com>
Copilot AI review requested due to automatic review settings May 4, 2026 05:54
Copy link
Copy Markdown

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR is a dependency refresh for the Go module, primarily advancing the shared xconfwebconfig dependency and the transitive observability/protobuf stack that the admin service relies on. In this codebase, those updates mainly affect build/runtime behavior through the module graph rather than through in-repo source changes.

Changes:

  • Bumped the direct github.com/rdkcentral/xconfwebconfig dependency to a newer pseudo-version.
  • Updated direct testing/protobuf dependencies such as go-cmp, testify, and google.golang.org/protobuf.
  • Refreshed a large set of indirect dependencies, including OpenTelemetry, gRPC, golang.org/x/*, and related transitive modules.

Reviewed changes

Copilot reviewed 1 out of 2 changed files in this pull request and generated no comments.

File Description
go.mod Updates direct and indirect module requirements, including xconfwebconfig, protobuf, and observability-related packages.
go.sum Refreshes checksums to match the new module graph introduced by the dependency upgrades.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@yeswanth2420 yeswanth2420 merged commit 94ac86f into develop May 4, 2026
7 checks passed
@github-actions github-actions Bot locked and limited conversation to collaborators May 4, 2026
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants