Skip to content

Bump connect to 1.21.0, cobra to 1.10.2 and protobuf to 1.36.12 - #4

Merged
castlemilk merged 1 commit into
mainfrom
deps/0.5.0-bumps
Oct 10, 2026
Merged

castlemilk merged 1 commit into
mainfrom
deps/0.5.0-bumps

Conversation

@castlemilk

Copy link
Copy Markdown
Contributor

Summary

Dependabot's three updates in one change, before the 0.5.0 release. Merged one at a time they would conflict in go.mod and go.sum.

Test plan

  • go build ./..., go vet ./..., go test -race -count=1 ./...
  • make notices leaves only the connect copyright line changed. On unchanged main it changes nothing with the local Go, so it matches CI's.
  • govulncheck ./...: no vulnerabilities
  • CI

Supersedes #1, #2 and #3.

🤖 Generated with Claude Code

The three Dependabot updates (#1, #2 and #3) in one change, so they don't
conflict in go.mod and go.sum. connect 1.21.0's license now says
2021-2025, so THIRD_PARTY_NOTICES is regenerated with `make notices`, as
in #1. cobra brings pflag 1.0.9.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
@castlemilk
castlemilk merged commit 218e596 into main Oct 10, 2026
3 checks passed
@castlemilk
castlemilk deleted the deps/0.5.0-bumps branch October 10, 2026 05:41
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant