Skip to content

Bump v2 production dependencies and Go 1.25 CI#282

Open
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/go_modules/v2/production-dependencies-78b4c76539
Open

Bump v2 production dependencies and Go 1.25 CI#282
dependabot[bot] wants to merge 3 commits into
mainfrom
dependabot/go_modules/v2/production-dependencies-78b4c76539

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Jun 5, 2026

Summary

This PR updates the v2 production dependency group and the CI needed to validate that dependency set.

Changed areas:

  • v2: production dependency updates in go.mod / go.sum, plus small lint cleanups required by the newer lint toolchain.
  • .github/workflows: build and lint workflows updated to run with Go 1.25.x and current GitHub Action versions.

Why CI changed

The updated dependency graph now includes modules whose own go directive requires Go 1.25.0, including Azure SDK, OpenTelemetry, and golang.org/x/* modules. Running the PR with the previous Go 1.21 workflow setup caused the gates to fail even though the dependency update builds and tests with Go 1.25.

The linter workflow was also updated to golangci-lint v2.12.2, which surfaced two small cleanup items:

  • Use reflect.Pointer instead of the old reflect.Ptr alias.
  • Remove an ineffective break from the processor cancellation select; behavior is unchanged because the surrounding loop exits via ctx.Err() != nil.

Validation

  • go build -v ./...
  • go test -count=1 -coverprofile=/tmp/go-shuttle-v2-profile.cov ./...
  • golangci-lint v2.12.2 run
  • GitHub Actions checks are passing on the latest pushed commit.

…ates

Bumps the production-dependencies group with 6 updates in the /v2 directory:

| Package | From | To |
| --- | --- | --- |
| [github.com/Azure/azure-sdk-for-go/sdk/azcore](https://github.com/Azure/azure-sdk-for-go) | `1.17.0` | `1.22.0` |
| [github.com/Azure/azure-sdk-for-go/sdk/messaging/azservicebus](https://github.com/Azure/azure-sdk-for-go) | `1.7.4` | `1.10.0` |
| [github.com/onsi/gomega](https://github.com/onsi/gomega) | `1.36.2` | `1.41.0` |
| [github.com/prometheus/client_golang](https://github.com/prometheus/client_golang) | `1.20.5` | `1.23.2` |
| [go.opentelemetry.io/otel](https://github.com/open-telemetry/opentelemetry-go) | `1.33.0` | `1.44.0` |
| [go.opentelemetry.io/otel/sdk](https://github.com/open-telemetry/opentelemetry-go) | `1.33.0` | `1.44.0` |



Updates `github.com/Azure/azure-sdk-for-go/sdk/azcore` from 1.17.0 to 1.22.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azcore/v1.17.0...sdk/azcore/v1.22.0)

Updates `github.com/Azure/azure-sdk-for-go/sdk/azidentity` from 1.8.1 to 1.13.1
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/azidentity/v1.8.1...sdk/azidentity/v1.13.1)

Updates `github.com/Azure/azure-sdk-for-go/sdk/messaging/azservicebus` from 1.7.4 to 1.10.0
- [Release notes](https://github.com/Azure/azure-sdk-for-go/releases)
- [Commits](Azure/azure-sdk-for-go@sdk/messaging/azservicebus/v1.7.4...sdk/azcore/v1.10.0)

Updates `github.com/onsi/gomega` from 1.36.2 to 1.41.0
- [Release notes](https://github.com/onsi/gomega/releases)
- [Changelog](https://github.com/onsi/gomega/blob/master/CHANGELOG.md)
- [Commits](onsi/gomega@v1.36.2...v1.41.0)

Updates `github.com/prometheus/client_golang` from 1.20.5 to 1.23.2
- [Release notes](https://github.com/prometheus/client_golang/releases)
- [Changelog](https://github.com/prometheus/client_golang/blob/main/CHANGELOG.md)
- [Commits](prometheus/client_golang@v1.20.5...v1.23.2)

Updates `github.com/prometheus/client_model` from 0.6.1 to 0.6.2
- [Release notes](https://github.com/prometheus/client_model/releases)
- [Commits](prometheus/client_model@v0.6.1...v0.6.2)

Updates `github.com/stretchr/testify` from 1.10.0 to 1.11.1
- [Release notes](https://github.com/stretchr/testify/releases)
- [Commits](stretchr/testify@v1.10.0...v1.11.1)

Updates `go.opentelemetry.io/otel` from 1.33.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.44.0)

Updates `go.opentelemetry.io/otel/sdk` from 1.33.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.44.0)

Updates `go.opentelemetry.io/otel/trace` from 1.33.0 to 1.44.0
- [Release notes](https://github.com/open-telemetry/opentelemetry-go/releases)
- [Changelog](https://github.com/open-telemetry/opentelemetry-go/blob/main/CHANGELOG.md)
- [Commits](open-telemetry/opentelemetry-go@v1.33.0...v1.44.0)

Updates `google.golang.org/protobuf` from 1.36.3 to 1.36.8

---
updated-dependencies:
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azcore
  dependency-version: 1.22.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/azidentity
  dependency-version: 1.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/Azure/azure-sdk-for-go/sdk/messaging/azservicebus
  dependency-version: 1.10.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/onsi/gomega
  dependency-version: 1.41.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/prometheus/client_golang
  dependency-version: 1.23.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: github.com/prometheus/client_model
  dependency-version: 0.6.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
- dependency-name: github.com/stretchr/testify
  dependency-version: 1.11.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: go.opentelemetry.io/otel
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: go.opentelemetry.io/otel/sdk
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: go.opentelemetry.io/otel/trace
  dependency-version: 1.44.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: production-dependencies
- dependency-name: google.golang.org/protobuf
  dependency-version: 1.36.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: production-dependencies
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jun 5, 2026
@karenychen
Copy link
Copy Markdown
Collaborator

Follow-up on the CI changes in this branch:

  • The workflow Go version was moved to 1.25.x because the updated dependency graph now includes modules whose own go directive is 1.25.0 (azcore, OpenTelemetry, and golang.org/x/*). Keeping Actions on Go 1.21 caused the previous coverage/linter failures once the module target moved to Go 1.25.
  • The processor.go cleanup is only to satisfy the newer linter. The old break inside case <-ctx.Done() only broke out of the select, not the outer for; behavior still exited on the next loop condition because ctx.Err() was non-nil. I removed that ineffective break rather than adding a labeled loop, so the cancellation behavior stays the same and the control flow is clearer.

Local validation after the change:

  • go build -v ./...
  • go test -count=1 -coverprofile=/tmp/go-shuttle-v2-profile.cov ./...
  • golangci-lint v2.12.2 run

@karenychen karenychen changed the title Bump the production-dependencies group across 1 directory with 11 updates Bump v2 production dependencies and Go 1.25 CI Jun 5, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant