Update gomod dependencies#4399
Conversation
ℹ️ Artifact update noticeFile name: flow/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: flow/pkg/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
4fdfff2 to
044fb40
Compare
Dependency Bump ReviewReviewed all upstream changelogs for the bumped range. Summary of findings: Packages reviewed
Notable behavioral change: OpenTelemetry v1.43.0 → v1.44.0OTel v1.44.0 introduces a default cardinality limit of 2000 per metric instrument (previously unlimited). PeerDB does not explicitly configure Risk assessment: Low. PeerDB's metric cardinality is driven by unique combinations of flow name, source/destination peer, status, and operation — per instrument, this is very unlikely to approach 2000 for typical deployments. However, large-scale deployments with many concurrent mirrors should be aware. If needed, Other OTel v1.44.0 changes: Security check
Verdict: No regressions found. Looks clean to merge. 🤖 Generated with Claude Code |
|
Renovate dependency bump reviewed. Checked upstream release notes for all bumped packages. AWS SDK Go v2 (v1.41.7 to v1.41.9) - patch. Bug fix for smithy-go (v1.25.1 to v1.26.0) - minor. Dependency update only. No regressions. cockroachdb/pebble (v2.1.5 to v2.1.6) - patch. Single correctness fix for OpenTelemetry Go (v1.43.0 to v1.44.0) - behavioral changes worth noting:
OpenTelemetry Go Contrib / otelgrpc (v0.68.0 to v0.69.0) - Temporal SDK (v1.44.0 to v1.44.1) + API (v1.62.12 to v1.62.13) - patch. Improved graceful worker shutdown (opt-in, requires server flag). No breaking changes. google.golang.org/genproto - routine digest update. No regressions. No PII/secret logging concerns — diff is limited to |
Code reviewUpstream behavioral changes in OTel SDK v1.44.0 (REVIEW.md compliance — dependency regression check) Two notable behavioral changes in this version bump: 1. Default cardinality limit of 2000 (high impact) — PeerDB's MeterProvider in Consider either verifying that no instrument exceeds 2000 attribute sets in your deployments, or explicitly setting 2. 64 MiB default OTLP request size cap (moderate impact) — |
Code review1 issue found. Checked for bugs and CLAUDE.md compliance. Breaking change: OTel SDK v1.44.0 default cardinality limit File: flow/go.mod, line 71 (go.opentelemetry.io/otel/sdk/metric v1.44.0) go.opentelemetry.io/otel/sdk/metric v1.44.0 introduces a default cardinality limit of 2000 per metric instrument (upstream changelog). Previously, the default was unlimited. When the limit is exceeded, new attribute sets are silently dropped and merged into an overflow bucket with otel.metric.overflow=true. PeerDB NewMeterProvider does not set a cardinality limit: peerdb/flow/otel_metrics/otel_manager.go Lines 709 to 715 in e78178c PeerDB emits metrics with high-cardinality attributes - per-flow, per-table, per-peer combinations (e.g. RecordsSyncedPerTableGauge). A deployment with 10 flows each replicating 100 tables x 3 operation types = 3,000 unique attribute sets per instrument, exceeding the new default. This would cause silent metric data loss with no errors. Suggested fix: Add sdkmetric.WithCardinalityLimit(0) to the NewMeterProvider call in otel_manager.go to restore unlimited cardinality, or set it to a sufficiently high value for your deployments. Flagged per REVIEW.md - upstream regression check for dependency bumps. |
|
The 2000 limit would need a check, how we're doing across production |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
044fb40 to
9d3fb32
Compare
Code reviewNo issues found. Checked for bugs and CLAUDE.md compliance. |
![claude[bot]](https://avatars.githubusercontent.com/in/1236702?s=60&v=4){kind=small}
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 | ||
| go.opentelemetry.io/otel/metric v1.44.0 | ||
| go.opentelemetry.io/otel/sdk v1.44.0 | ||
| go.opentelemetry.io/otel/sdk/metric v1.44.0 |
There was a problem hiding this comment.
Informational — OTel v1.44.0 introduces a default cardinality limit of 2000 per metric instrument.
Previously unlimited, new attribute sets beyond 2000 unique combinations per instrument are now dropped and aggregated under otel.metric.overflow=true. PeerDB uses attributes like DestinationTableName, FlowName, PeerName, and SlotName on its metrics. For typical deployments this should be well under 2000 per instrument, but deployments with a very large number of mirrors/tables could hit this.
To restore the old unlimited behavior if needed: metric.WithCardinalityLimit(0) or env OTEL_GO_X_CARDINALITY_LIMIT=0.
Also: OTLP exporters now cap request size at 64 MiB (configurable via WithMaxRequestSize). Oversized requests fail as non-retryable errors.
Dependency Bump Review — Upstream Changelog AnalysisReviewed all upstream release notes for the bumped range of each dependency. No regressions or breaking changes that affect PeerDB were found. Summary of notable upstream changes below. golang.org/x/net v0.54.0 → v0.55.0 — Security fixes Fixes multiple CVEs in the OpenTelemetry Go v1.43.0 → v1.44.0 — Behavioral changes (see inline comment)
AWS SDK Go v2 (multiple packages) — Patch-level, safe All patch/minor bumps. Notable: credential cache files now created with cockroachdb/pebble v2.1.5 → v2.1.6 — Single bug fix Fixes Temporal SDK v1.44.0 → v1.44.1 — Graceful shutdown improvement Worker shutdown now drains already-polled tasks when the server supports it. No breaking changes. Temporal API v1.62.13 is infrastructure-only. Other
PII / Secret Logging Check No source code changes — only |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
9d3fb32 to
62505bb
Compare
Dependency Bump ReviewReviewed upstream release notes for all bumped packages. Summary of findings: OpenTelemetry v1.43.0 -> v1.44.0 -- Breaking change: default cardinality limit (see inline comment)
Positive: this release also includes two security fixes (GHSA-995v-fvrw-c78m, GHSA-5wrp-cwcj-q835) and several race condition fixes in the metric SDK. otelgrpc v0.68.0 -> v0.69.0 -- Removed WithSpanOptions The deprecated cockroachdb/pebble v2.1.5 -> v2.1.6 -- Bug fix Fixes Temporal SDK v1.44.0 -> v1.44.1 -- Graceful shutdown improvement Workers now drain already-polled tasks during shutdown (when server supports it). Backward-compatible, no breaking changes. Temporal API v1.62.12 -> v1.62.13 -- Maintenance Bug fixes and generated Nexus service definitions. No breaking changes. AWS SDK Go v2 (multiple packages) -- Patch bumps Bug fix for smithy-go v1.25.1 -> v1.26.0 Added New transitive dependencies
PII / Secrets check: |
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 | ||
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 | ||
| go.opentelemetry.io/otel/metric v1.44.0 | ||
| go.opentelemetry.io/otel/sdk v1.44.0 |
There was a problem hiding this comment.
Warning: go.opentelemetry.io/otel/sdk/metric v1.44.0 introduces a default cardinality limit of 2000 per instrument. When the limit is reached, new attribute sets are silently dropped into an overflow bucket. PeerDB defines 40+ metric instruments in flow/otel_metrics/otel_manager.go, some keyed by dynamic attributes (per-table, per-flow). If any single instrument exceeds 2000 unique attribute combinations, metrics will be silently lost. For most deployments this is probably fine (2000 is generous), but worth verifying for large multi-tenant deployments. If needed, override with sdkmetric.WithCardinalityLimit(0) in setupMetricsAndProvider().
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
62505bb to
42ddc96
Compare
There was a problem hiding this comment.
Reviewed this Renovate dependency bump. Upstream release notes checked for all bumped packages. Two findings noted as separate PR comments below.
Summary of bumps reviewed:
- AWS SDK Go v2 (core v1.41.7 to v1.41.9, smithy-go v1.25.1 to v1.27.0, S3/KMS/SES/SNS/STS patches): No breaking changes. Includes a smithy-go LRU cache memory leak fix (good).
- CockroachDB Pebble (v2.1.5 to v2.1.6): Single correctness bug fix in row-block iterator IsLowerBound. No API changes. Safe.
- OpenTelemetry (v1.43.0 to v1.44.0): New default cardinality limit of 2000 per instrument. This is the main finding -- see follow-up comment.
- Temporal SDK (v1.44.0 to v1.44.1, api v1.62.12 to v1.62.13): Patch release improving graceful shutdown drain. New nexus-proto-annotations indirect dep is expected. No breaking changes.
- golang.org/x/net (v0.54.0 to v0.55.0), google.golang.org/genproto updates: Routine. No breaking changes.
|
[medium] Previously there was no limit. New attribute-set combinations beyond 2000 are silently dropped and aggregated into an overflow bucket tagged PeerDB uses high-cardinality attributes like No existing Suggested action: Either (a) confirm 2000 is acceptable for all expected deployments, or (b) add Ref: https://github.com/open-telemetry/opentelemetry-go/releases/tag/v1.44.0 |
|
[info] This version introduced schema-based serialization and CBOR max-nesting-depth enforcement. Subsequent patches v1.27.1 and v1.27.2 fix CBOR/JSON union deserialization bugs (including a panic). PeerDB AWS usage (S3, KMS, SES, SNS, STS) primarily uses JSON/XML, so risk is very low, but worth noting in case CBOR-related issues surface -- those patches exist upstream. |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
42ddc96 to
9ed75a6
Compare
|
Re-reviewed this Renovate bump. Upstream changelogs checked for all packages — confirming prior findings and adding a note on Confirmed safe (no regressions found):
Security-positive —
Previously flagged (still valid): OTel v1.44.0 default cardinality limit of 2000 per instrument + 64 MiB OTLP request size cap — see earlier comments on this PR. No new concerns found beyond what was already flagged. |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
9ed75a6 to
e1a3ff8
Compare
Dependency Bump Review — PR #4399Reviewed upstream release notes for all bumped packages. No PII/secret logging concerns (changes are go.mod/go.sum only). Findings1. OpenTelemetry v1.43.0 → v1.44.0 — New default cardinality limit (medium severity) OTel v1.44.0 introduces a default 2000-attribute cardinality limit in the metric SDK. Exceeding this drops new attribute sets into an overflow bucket ( Other OTel changes: 2. smithy-go v1.25.1 → v1.27.0 — Known post-release fixes (low severity) smithy-go v1.27.0 adds schema-based serialization and enforces max CBOR nesting depth of 128. However, v1.27.1 (panic in nested union deserialization for JSON/CBOR) and v1.27.2 (improper CBOR union serialization) fixed issues introduced in v1.27.0. PeerDB primarily uses AWS services with restxml/awsquery/awsjson protocols (S3, KMS, SES, SNS, STS), so impact is likely low, but worth being aware of. Also includes a memory leak fix in LRU cache (v1.25.2) and file permission hardening (aws-sdk-go-v2 v1.41.8). 3. Temporal SDK v1.44.0 → v1.44.1 — Graceful shutdown improvement (no action needed) Workers now drain already-polled tasks on shutdown when the server supports it (requires server flag 4. New transitive dependency: Pulled in by 5. cockroachdb/pebble v2.1.5 → v2.1.6 — Correctness fix (no action needed) Single bug fix: 6. Other bumps (no concerns)
SummaryThe OTel cardinality limit (finding #1) is the most actionable item — recommend verifying PeerDB's metric attribute cardinality won't exceed 2000 combinations per instrument, or explicitly configuring limits. All other changes are low-risk. 🤖 Generated with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
e1a3ff8 to
1efd967
Compare
Dependency Bump ReviewReviewed all upstream changelogs for the dependency bumps in this PR. Here are the findings: Security Fixes (positive reasons to merge)
Notable Behavioral Changes
Regressions Check
Breaking Changes Affecting PeerDBNone found. Verified that PeerDB does not use any removed/deprecated APIs ( New Dependencies
VerdictNo regressions or breaking changes affecting PeerDB. Multiple security fixes make this a beneficial upgrade. The OTel cardinality limit (2000 default) is the only behavioral change worth monitoring in production, but PeerDB's metric cardinality appears well within bounds. 🤖 Generated with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
1efd967 to
3c76c27
Compare
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 | ||
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 | ||
| go.opentelemetry.io/otel/metric v1.44.0 | ||
| go.opentelemetry.io/otel/sdk v1.44.0 |
| go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.44.0 | ||
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 | ||
| go.opentelemetry.io/otel/metric v1.44.0 | ||
| go.opentelemetry.io/otel/sdk v1.44.0 |
There was a problem hiding this comment.
Note (informational, non-blocking): OpenTelemetry SDK v1.44.0 introduces a default cardinality limit of 2000 for the metrics SDK. When more than 2000 unique attribute sets are recorded for a single metric instrument, new attribute sets are dropped and aggregated into an overflow bucket. Previously there was no limit. If PeerDB has any high-cardinality metrics (e.g. metrics tagged per-table, per-peer, or per-flow), this could silently truncate metric data. To restore old behavior use WithCardinalityLimit(0). Also: attribute.Value.Emit() is deprecated in favor of Value.String(); security fixes for schema file handle leak and baggage extraction DoS; new default 64 MiB OTLP request size limit. All other bumps are clean - see review summary comment for details.
Renovate dependency bump reviewReviewed upstream release notes for all bumped packages. No regressions or breaking changes that affect PeerDB were found. One behavioral change worth noting on the OTel bump (details below). PII/Secrets check: Diff is entirely Upstream changelog summary
Note: OTel v1.44.0 behavioral change — new default cardinality limitApplies to The OTel metrics SDK now enforces a default cardinality limit of 2000 unique attribute sets per instrument. Previously there was no limit. Attribute sets exceeding this are dropped and aggregated into a special overflow set. Additionally, OTLP exporters now enforce a default 64 MiB request size limit (before compression); oversized requests become non-retryable errors. I checked PeerDB OTel setup ( Likely fine for current usage, but worth being aware of. If needed, the limit can be raised per-instrument via |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
e348d10 to
f18836f
Compare
Dependency Bump ReviewReviewed all upstream release notes for the bumped range. No regressions found. Key findings from upstream changelogs:
Security: No PII/secrets exposure risk — changes are exclusively in 🤖 Generated with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
f18836f to
acaa43b
Compare
Dependency Bump Review — PR #4399Reviewed all upstream changelogs for the bumped dependency ranges. Here is a summary of findings: Packages with notable changes (informational, not blocking)
Packages with no concerns
Security & PII check
VerdictNo regressions found that affect PeerDB. The OTel metric/attribute removals are the most notable behavioral change but do not impact PeerDB's current usage. LGTM ✅ 🤖 Generated with Claude Code |
Code reviewNo issues found. Checked for bugs and CLAUDE.md compliance. |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
acaa43b to
81c0a0e
Compare
There was a problem hiding this comment.
Dependency bump review
Reviewed upstream release notes for all bumped packages. No regressions found. Summary:
Safe bumps (bug fixes / non-breaking features):
- aws-sdk-go-v2 v1.41.7 -> v1.42.0: New retry preview behind opt-in env flag
AWS_NEW_RETRIES_2026. No behavior change unless flag is set. - smithy-go v1.25.1 -> v1.27.2: Fixes a panic on nested union deserialization (v1.27.1) and incorrect CBOR union serialization (v1.27.2). Good to take.
- gosnowflake/v2 v2.0.2 -> v2.1.0: No breaking changes. Fixes silent data loss on PUT uploads for files whose name ends with
., and a query cancellation hang. - pebble/v2 v2.1.5 -> v2.1.6: Single correctness bug fix in row-block lower-bound with synthetic suffixes.
- franz-go v1.21.2 -> v1.21.3: Fixes a critical hang where
PollRecords/PollFetchescould permanently block since v1.21.0 when >4 pending broker fetches. Important fix. - urfave/cli/v3 v3.9.0 -> v3.9.1: Bug fixes only (bash completion, env sources, subcommand inheritance).
- lestrrat-go/httprc/v3 v3.0.5 -> v3.0.6: Fixes failed HTTP syncs tight-looping instead of backing off.
- slack-go/slack v0.24.0 -> v0.25.0: Breaking change to
TableBlock.Rowstype ([]TableCell->[][]TableCell), but PeerDB does not use Slack'sTableBlockstruct — verified via grep. Safe for this codebase.
Worth noting (see inline comment):
- OTel v1.43.0 -> v1.44.0: New default cardinality limit of 2000 per instrument. See inline comment for details.
| go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.44.0 | ||
| go.opentelemetry.io/otel/metric v1.44.0 | ||
| go.opentelemetry.io/otel/sdk v1.44.0 | ||
| go.opentelemetry.io/otel/sdk/metric v1.44.0 |
There was a problem hiding this comment.
OTel v1.44.0 introduces a default cardinality limit of 2000 per instrument.
PeerDB emits per-table metrics (records_synced_per_table, records_synced_per_table_counter) with attributes FlowName × DestinationTableName × RecordOperationTypeKey. In large deployments with many flows and tables, the number of unique attribute combinations could approach or exceed 2000, at which point excess attribute sets would be silently dropped.
This is unlikely to bite most deployments (e.g. 200 flows × 3 tables × 3 ops = 1800, still under the limit), but worth being aware of. If needed, the limit can be raised via WithCardinalityLimit() in the sdkmetric.View.
Additionally, OTLP exporters now enforce a 64 MiB default request size limit (non-retryable error if exceeded).
Not a blocker — just flagging for awareness.
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
81c0a0e to
477e1f2
Compare
Dependency Bump ReviewReviewed all upstream release notes for the bumped range. No blocking issues found. Upstream changes of note
Security check
LGTM — no regressions identified in the bumped ranges. 🤖 Generated with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
477e1f2 to
eb9310e
Compare
There was a problem hiding this comment.
Dependency Bump Review
Reviewed upstream release notes and changelogs for all bumped dependencies. Only go.mod/go.sum files changed — no source code modifications, no PII/secret logging risk.
Summary of findings
| Package | Bump | Status |
|---|---|---|
aws-sdk-go-v2 (core + services) |
v1.41.7 → v1.42.0 | Clean — additive features, opt-in retry preview behind AWS_NEW_RETRIES_2026 env var, smithy-go union deserialization bug fixes |
smithy-go |
v1.25.1 → v1.27.2 | Clean — bug fixes for union serialization in CBOR/JSON protocols |
gosnowflake/v2 |
v2.0.2 → v2.1.0 | Clean — context cancellation fix for chunk/Arrow stream downloads, new telemetry (opt-out via SF_TELEMETRY_DISABLE_CONNECTION_SHAPE=true), no breaking changes |
pebble/v2 |
v2.1.5 → v2.1.6 | Clean — single correctness bug fix in row block iterator |
slack-go/slack |
v0.24.0 → v0.25.0 | Clean for PeerDB — breaking change in TableBlock.Rows type ([][]interface{} → [][]TableCell), but PeerDB only uses SendMessageContext with header/section blocks, not TableBlock |
franz-go |
v1.21.2 → v1.21.3 | Clean — fixes PollRecords/PollFetches hang regression (since v1.21.0), zombie consumer fix, data race fix |
urfave/cli/v3 |
v3.9.0 → v3.9.1 | Clean — bug fixes only |
lestrrat-go/httprc/v3 |
v3.0.5 → v3.0.6 | Clean — fixes tight-loop on fetch failure (now backs off by MinInterval) |
go.temporal.io/sdk |
→ v1.44.1 | Clean — graceful shutdown drain improvement, memo encoding now uses user DataConverter first (backward-compatible) |
go.opentelemetry.io/otel |
v1.43.0 → v1.44.0 | |
golang.org/x/*, google.golang.org/* |
minor bumps | Clean — standard transitive updates |
| go.temporal.io/api v1.62.12 | ||
| go.temporal.io/sdk v1.44.0 | ||
| go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.69.0 | ||
| go.opentelemetry.io/otel v1.44.0 |
There was a problem hiding this comment.
Previously the limit was unlimited. When exceeded, excess attribute sets are silently dropped and aggregated into an otel.metric.overflow=true series.
PeerDB's NewMeterProvider in otel_metrics/otel_manager.go does not set WithCardinalityLimit, so the new default of 2000 applies. Metrics are emitted with per-flow, per-peer, per-activity attributes — large deployments with many mirrors could potentially approach this limit.
To restore unlimited behavior: pass sdkmetric.WithCardinalityLimit(0) to NewMeterProvider, or set OTEL_GO_X_CARDINALITY_LIMIT=0.
Recommendation: This is likely fine for most deployments, but worth being aware of. Consider adding WithCardinalityLimit(0) if you expect high-cardinality deployments, or monitor for the otel.metric.overflow attribute in your metrics backend after merging.
Additionally, this bump includes two security fixes:
- GHSA-995v-fvrw-c78m: file descriptor leak in schema
ParseFile - GHSA-5wrp-cwcj-q835: malformed/oversized baggage headers could flood logs (now capped at 8192 bytes)
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
eb9310e to
2d19f8f
Compare
Dependency Bump ReviewReviewed upstream release notes and changelogs for all bumped packages. Changes are confined to Key findingsNo regressions or breaking changes affecting PeerDB were identified. Details by package:
Summary
✅ Reviewed — looks clean to merge. |
renovate
Bot
force-pushed
the
renovate/gomod
branch
2 times, most recently
from
1f187a1 to
c71dc7e
Compare
|
Dependency bump review — no issues found. Reviewed all version bumps in this PR against upstream release notes:
LGTM — clean dependency bump. |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
c71dc7e to
8804a9b
Compare
|
Reviewed: gomod dependency bump — no regressions found. Checked the diff (6 files, all go.mod/go.sum only — no source changes, no PII/secrets concern) and read upstream release notes for the most critical dependencies:
No regressions, no breaking changes affecting PeerDB's usage patterns. 🤖 Reviewed with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
8804a9b to
b374cc0
Compare
Dependency Bump ReviewReviewed all upstream changelogs for the 25+ Go dependency bumps in this PR. Only Key upstream findingsfranz-go v1.21.2 → v1.21.3 (Kafka client) — All bug fixes, no breaking changes:
smithy-go v1.25.1 → v1.27.2 (AWS SDK core serialization) — v1.27.0 introduced a new schema-based serialization layer which caused regressions in union serialization (CBOR and JSON). Both v1.27.1 and v1.27.2 are follow-up fixes. This PR correctly lands on v1.27.2 which includes all regression fixes. Also picks up a memory leak fix in the LRU cache from v1.25.1. Low risk for PeerDB's S3 usage (straightforward request shapes). OpenTelemetry Go v1.43.0 → v1.44.0 — Two behavioral defaults worth noting:
otelgrpc v0.68.0 → v0.69.0 — Semconv v1.40.0 alignment:
gosnowflake v2.0.2 → v2.1.0 — No breaking changes. Bug fixes for chunk-download cancellation and OCSP cache. New Temporal SDK v1.44.0 → v1.44.1 — Workers now drain already-polled tasks during graceful shutdown (requires server-side opt-in). No breaking changes. pebble v2.1.5 → v2.1.6 — Data integrity fix for slack-go v0.24.0 → v0.25.0 — Other bumps (AWS SDK service modules, x/crypto, x/sync, x/mod, x/tools, urfave/cli, httprc) — Patch/minor bumps with no breaking changes relevant to PeerDB. VerdictNo regressions or breaking changes that affect PeerDB. The franz-go hang fix and smithy-go regression fixes are positive improvements. The OTel cardinality default is worth being aware of but should not impact current usage. 🤖 Generated with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
b374cc0 to
7c4264b
Compare
Dependency bump review — looks cleanReviewed the upstream release notes for all bumped dependencies. The diff is purely Upstream release notes summary
New indirect dependencies
Security review
🤖 Generated with Claude Code |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
7c4264b to
b374bb5
Compare
Dependency Bump ReviewReviewed the upstream release notes for all bumped packages. No regressions or concerns found for PeerDB's usage. AWS SDK Go v2 (v1.41.7 → v1.42.0) + transitive deps
Snowflake gosnowflake/v2 (v2.0.2 → v2.1.0)
Files changedOnly Verdict: Clean bump, safe to merge. |
renovate
Bot
force-pushed
the
renovate/gomod
branch
from
b374bb5 to
c05ffa2
Compare
Dependency Bump ReviewReviewed all upstream release notes and changelogs for the bumped range of each dependency. No regressions or breaking changes that affect PeerDB were found. Key findings:
PII/Secrets check:Changes are limited to New transitive dependency:
🤖 Generated with Claude Code |
1 participant
This PR contains the following updates:
v1.41.7→v1.42.0v1.32.18→v1.32.25v1.19.17→v1.19.24v1.6.23→v1.6.29v1.52.0→v1.53.4v1.101.0→v1.103.3v1.104.0v1.34.24→v1.35.2v1.39.17→v1.40.1v1.42.1→v1.43.3v1.25.1→v1.27.2v2.1.5→v2.1.606b4fb6→ace1fb4v3.0.5→v3.0.6v0.24.0→v0.25.0v0.26.0v2.0.2→v2.1.0v1.21.2→v1.21.3v3.9.0→v3.9.1v3.10.0v0.68.0→v0.69.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.43.0→v1.44.0v1.62.12→v1.62.14v1.44.0→v1.44.1v1.45.0v0.52.0→v0.53.074f9aab→c48552fv0.36.0→v0.37.0v0.20.0→v0.21.0v0.45.0→v0.46.0v0.36.1→v0.36.2Release Notes
aws/aws-sdk-go-v2 (github.com/aws/aws-sdk-go-v2)
v1.42.0Compare Source
General Highlights
Module Highlights
github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.43.0github.com/aws/aws-sdk-go-v2/service/connect: v1.171.0github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.12.0github.com/aws/aws-sdk-go-v2/service/groundstation: v1.41.0github.com/aws/aws-sdk-go-v2/service/imagebuilder: v1.53.0github.com/aws/aws-sdk-go-v2/service/neptune: v1.44.4github.com/aws/aws-sdk-go-v2/service/quicksight: v1.107.0github.com/aws/aws-sdk-go-v2/service/sagemaker: v1.241.0github.com/aws/aws-sdk-go-v2/service/sts: v1.42.0v1.41.12Compare Source
General Highlights
Module Highlights
github.com/aws/aws-sdk-go-v2: v1.41.5github.com/aws/aws-sdk-go-v2/service/accessanalyzer: v1.45.12github.com/aws/aws-sdk-go-v2/service/account: v1.30.5github.com/aws/aws-sdk-go-v2/service/acm: v1.37.23github.com/aws/aws-sdk-go-v2/service/acmpca: v1.46.12github.com/aws/aws-sdk-go-v2/service/aiops: v1.6.21github.com/aws/aws-sdk-go-v2/service/amp: v1.42.9github.com/aws/aws-sdk-go-v2/service/amplify: v1.38.14github.com/aws/aws-sdk-go-v2/service/amplifybackend: v1.32.20github.com/aws/aws-sdk-go-v2/service/amplifyuibuilder: v1.28.20github.com/aws/aws-sdk-go-v2/service/apigateway: v1.39.1github.com/aws/aws-sdk-go-v2/service/apigatewaymanagementapi: v1.29.14github.com/aws/aws-sdk-go-v2/service/apigatewayv2: v1.34.1github.com/aws/aws-sdk-go-v2/service/appconfig: v1.43.13github.com/aws/aws-sdk-go-v2/service/appconfigdata: v1.23.22github.com/aws/aws-sdk-go-v2/service/appfabric: v1.16.21github.com/aws/aws-sdk-go-v2/service/appflow: v1.51.12github.com/aws/aws-sdk-go-v2/service/appintegrations: v1.37.7github.com/aws/aws-sdk-go-v2/service/applicationautoscaling: v1.41.14github.com/aws/aws-sdk-go-v2/service/applicationcostprofiler: v1.27.12github.com/aws/aws-sdk-go-v2/service/applicationdiscoveryservice: v1.35.13github.com/aws/aws-sdk-go-v2/service/applicationinsights: v1.34.20github.com/aws/aws-sdk-go-v2/service/applicationsignals: v1.19.1github.com/aws/aws-sdk-go-v2/service/appmesh: v1.35.12github.com/aws/aws-sdk-go-v2/service/apprunner: v1.39.14github.com/aws/aws-sdk-go-v2/service/appstream: v1.54.4github.com/aws/aws-sdk-go-v2/service/appsync: v1.53.5github.com/aws/aws-sdk-go-v2/service/arcregionswitch: v1.6.3github.com/aws/aws-sdk-go-v2/service/arczonalshift: v1.22.23github.com/aws/aws-sdk-go-v2/service/artifact: v1.15.5github.com/aws/aws-sdk-go-v2/service/athena: v1.57.4github.com/aws/aws-sdk-go-v2/service/auditmanager: v1.46.12github.com/aws/aws-sdk-go-v2/service/autoscaling: v1.64.4github.com/aws/aws-sdk-go-v2/service/autoscalingplans: v1.30.14github.com/aws/aws-sdk-go-v2/service/b2bi: v1.0.0-preview.100github.com/aws/aws-sdk-go-v2/service/backup: v1.54.11github.com/aws/aws-sdk-go-v2/service/backupgateway: v1.26.3github.com/aws/aws-sdk-go-v2/service/backupsearch: v1.6.23github.com/aws/aws-sdk-go-v2/service/batch: v1.63.2github.com/aws/aws-sdk-go-v2/service/bcmdashboards: v1.1.4github.com/aws/aws-sdk-go-v2/service/bcmdataexports: v1.14.0github.com/aws/aws-sdk-go-v2/service/bcmpricingcalculator: v1.10.9github.com/aws/aws-sdk-go-v2/service/bcmrecommendedactions: v1.1.5github.com/aws/aws-sdk-go-v2/service/bedrock: v1.57.1github.com/aws/aws-sdk-go-v2/service/bedrockagent: v1.52.7github.com/aws/aws-sdk-go-v2/service/bedrockagentcore: v1.15.2github.com/aws/aws-sdk-go-v2/service/bedrockagentcorecontrol: v1.25.1github.com/aws/aws-sdk-go-v2/service/bedrockagentruntime: v1.51.8github.com/aws/aws-sdk-go-v2/service/bedrockdataautomation: v1.13.5github.com/aws/aws-sdk-go-v2/service/bedrockdataautomationruntime: v1.10.4github.com/aws/aws-sdk-go-v2/service/bedrockruntime: v1.50.4github.com/aws/aws-sdk-go-v2/service/billing: v1.10.4github.com/aws/aws-sdk-go-v2/service/billingconductor: v1.28.5github.com/aws/aws-sdk-go-v2/service/braket: v1.39.8github.com/aws/aws-sdk-go-v2/service/budgets: v1.43.4github.com/aws/aws-sdk-go-v2/service/chatbot: v1.14.21github.com/aws/aws-sdk-go-v2/service/chime: v1.41.12github.com/aws/aws-sdk-go-v2/service/chimesdkidentity: v1.27.20github.com/aws/aws-sdk-go-v2/service/chimesdkmediapipelines: v1.26.21github.com/aws/aws-sdk-go-v2/service/chimesdkmeetings: v1.33.15github.com/aws/aws-sdk-go-v2/service/chimesdkmessaging: v1.32.17github.com/aws/aws-sdk-go-v2/service/chimesdkvoice: v1.28.13github.com/aws/aws-sdk-go-v2/service/cleanrooms: v1.42.4github.com/aws/aws-sdk-go-v2/service/cleanroomsml: v1.22.5github.com/aws/aws-sdk-go-v2/service/cloud9: v1.33.20github.com/aws/aws-sdk-go-v2/service/cloudcontrol: v1.29.13github.com/aws/aws-sdk-go-v2/service/clouddirectory: v1.30.12github.com/aws/aws-sdk-go-v2/service/cloudformation: v1.71.9github.com/aws/aws-sdk-go-v2/service/cloudfront: v1.60.4github.com/aws/aws-sdk-go-v2/service/cloudfrontkeyvaluestore: v1.12.24github.com/aws/aws-sdk-go-v2/service/cloudhsm: v1.29.21github.com/aws/aws-sdk-go-v2/service/cloudhsmv2: v1.34.21github.com/aws/aws-sdk-go-v2/service/cloudsearch: v1.32.12github.com/aws/aws-sdk-go-v2/service/cloudsearchdomain: v1.28.20github.com/aws/aws-sdk-go-v2/service/cloudtrail: v1.55.9github.com/aws/aws-sdk-go-v2/service/cloudtraildata: v1.17.13github.com/aws/aws-sdk-go-v2/service/cloudwatch: v1.55.3github.com/aws/aws-sdk-go-v2/service/cloudwatchevents: v1.32.23github.com/aws/aws-sdk-go-v2/service/cloudwatchlogs: v1.65.0github.com/aws/aws-sdk-go-v2/service/codeartifact: v1.38.21github.com/aws/aws-sdk-go-v2/service/codebuild: v1.68.13github.com/aws/aws-sdk-go-v2/service/codecatalyst: v1.21.12github.com/aws/aws-sdk-go-v2/service/codecommit: v1.33.12github.com/aws/aws-sdk-go-v2/service/codeconnections: v1.10.20github.com/aws/aws-sdk-go-v2/service/codedeploy: v1.35.13github.com/aws/aws-sdk-go-v2/service/codeguruprofiler: v1.29.20github.com/aws/aws-sdk-go-v2/service/codegurureviewer: v1.34.20github.com/aws/aws-sdk-go-v2/service/codegurusecurity: v1.16.24github.com/aws/aws-sdk-go-v2/service/codepipeline: v1.46.21github.com/aws/aws-sdk-go-v2/service/codestarconnections: v1.35.13github.com/aws/aws-sdk-go-v2/service/codestarnotifications: v1.31.21github.com/aws/aws-sdk-go-v2/service/cognitoidentity: v1.33.22github.com/aws/aws-sdk-go-v2/service/cognitoidentityprovider: v1.59.3github.com/aws/aws-sdk-go-v2/service/cognitosync: v1.29.12github.com/aws/aws-sdk-go-v2/service/comprehend: v1.40.21github.com/aws/aws-sdk-go-v2/service/comprehendmedical: v1.31.21github.com/aws/aws-sdk-go-v2/service/computeoptimizer: v1.49.8github.com/aws/aws-sdk-go-v2/service/computeoptimizerautomation: v1.0.8github.com/aws/aws-sdk-go-v2/service/configservice: v1.62.1github.com/aws/aws-sdk-go-v2/service/connect: v1.166.1github.com/aws/aws-sdk-go-v2/service/connectcampaigns: v1.20.20github.com/aws/aws-sdk-go-v2/service/connectcampaignsv2: v1.11.4github.com/aws/aws-sdk-go-v2/service/connectcases: v1.39.1github.com/aws/aws-sdk-go-v2/service/connectcontactlens: v1.33.13github.com/aws/aws-sdk-go-v2/service/connecthealth: v1.0.3github.com/aws/aws-sdk-go-v2/service/connectparticipant: v1.36.7github.com/aws/aws-sdk-go-v2/service/controlcatalog: v1.14.9github.com/aws/aws-sdk-go-v2/service/controltower: v1.28.9github.com/aws/aws-sdk-go-v2/service/costandusagereportservice: v1.34.13github.com/aws/aws-sdk-go-v2/service/costexplorer: v1.63.6github.com/aws/aws-sdk-go-v2/service/costoptimizationhub: v1.22.8github.com/aws/aws-sdk-go-v2/service/customerprofiles: v1.57.2github.com/aws/aws-sdk-go-v2/service/databasemigrationservice: v1.61.10github.com/aws/aws-sdk-go-v2/service/databrew: v1.39.14github.com/aws/aws-sdk-go-v2/service/dataexchange: v1.40.14github.com/aws/aws-sdk-go-v2/service/datapipeline: v1.30.20github.com/aws/aws-sdk-go-v2/service/datasync: v1.58.2github.com/aws/aws-sdk-go-v2/service/datazone: v1.54.2github.com/aws/aws-sdk-go-v2/service/dax: v1.29.16github.com/aws/aws-sdk-go-v2/service/deadline: v1.26.2github.com/aws/aws-sdk-go-v2/service/detective: v1.38.13github.com/aws/aws-sdk-go-v2/service/devicefarm: v1.38.8github.com/aws/aws-sdk-go-v2/service/devopsguru: v1.40.12github.com/aws/aws-sdk-go-v2/service/directconnect: v1.38.15github.com/aws/aws-sdk-go-v2/service/directoryservice: v1.38.16github.com/aws/aws-sdk-go-v2/service/directoryservicedata: v1.7.21github.com/aws/aws-sdk-go-v2/service/dlm: v1.35.16github.com/aws/aws-sdk-go-v2/service/docdb: v1.48.13github.com/aws/aws-sdk-go-v2/service/docdbelastic: v1.20.13github.com/aws/aws-sdk-go-v2/service/drs: v1.36.13github.com/aws/aws-sdk-go-v2/service/dsql: v1.12.8github.com/aws/aws-sdk-go-v2/service/dynamodb: v1.57.1github.com/aws/aws-sdk-go-v2/service/dynamodbstreams: v1.32.14github.com/aws/aws-sdk-go-v2/service/ebs: v1.33.14github.com/aws/aws-sdk-go-v2/service/ec2: v1.296.1github.com/aws/aws-sdk-go-v2/service/ec2instanceconnect: v1.32.20github.com/aws/aws-sdk-go-v2/service/ecr: v1.56.2github.com/aws/aws-sdk-go-v2/service/ecrpublic: v1.38.13github.com/aws/aws-sdk-go-v2/service/ecs: v1.74.1github.com/aws/aws-sdk-go-v2/service/efs: v1.41.14github.com/aws/aws-sdk-go-v2/service/eks: v1.81.2github.com/aws/aws-sdk-go-v2/service/eksauth: v1.12.13github.com/aws/aws-sdk-go-v2/service/elasticache: v1.51.13github.com/aws/aws-sdk-go-v2/service/elasticbeanstalk: v1.34.2github.com/aws/aws-sdk-go-v2/service/elasticloadbalancing: v1.33.23github.com/aws/aws-sdk-go-v2/service/elasticloadbalancingv2: v1.54.10github.com/aws/aws-sdk-go-v2/service/elasticsearchservice: v1.39.2github.com/aws/aws-sdk-go-v2/service/elementalinference: v1.0.3github.com/aws/aws-sdk-go-v2/service/emr: v1.59.0github.com/aws/aws-sdk-go-v2/service/emrcontainers: v1.40.17github.com/aws/aws-sdk-go-v2/service/emrserverless: v1.39.6github.com/aws/aws-sdk-go-v2/service/entityresolution: v1.26.5github.com/aws/aws-sdk-go-v2/service/eventbridge: v1.45.23Configuration
📅 Schedule: (in timezone Etc/UTC)
🚦 Automerge: Enabled.
♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.