Skip to content

*: update third-party dependencies#12560

Open
wk989898 wants to merge 3 commits intopingcap:masterfrom
wk989898:fix-0313
Open

*: update third-party dependencies#12560
wk989898 wants to merge 3 commits intopingcap:masterfrom
wk989898:fix-0313

Conversation

@wk989898
Copy link
Collaborator

What problem does this PR solve?

Issue Number: close #12556

What is changed and how it works?

Check List

Tests

  • Unit test
  • Integration test
  • Manual test (add detailed scripts or steps below)
  • No code

Questions

Will it cause performance regression or break compatibility?
Do you need to update user documentation, design documentation or monitoring documentation?

Release note

Please refer to [Release Notes Language Style Guide](https://pingcap.github.io/tidb-dev-guide/contribute-to-tidb/release-notes-style-guide.html) to write a quality release note.

If you don't think this PR needs a release note then fill it with `None`.

Signed-off-by: wk989898 <nhsmwk@gmail.com>
@ti-chi-bot ti-chi-bot bot added the release-note Denotes a PR that will be considered when it comes time to generate release notes. label Mar 13, 2026
@gemini-code-assist
Copy link

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request performs routine maintenance by updating the Go language version and a specific cryptographic dependency. These updates ensure the project benefits from the latest language features, performance improvements, and security patches, thereby enhancing overall system stability and reliability.

Highlights

  • Go Version Update: The Go language version used across the project and in Docker environments has been updated from 1.25.6 to 1.25.7.
  • Dependency Update: The filippo.io/edwards25519 cryptographic library dependency has been updated from version v1.1.0 to v1.1.1.

🧠 New Feature in Public Preview: You can now enable Memory to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Changelog
  • deployments/ticdc/docker/integration-test.Dockerfile
    • Updated the GOLANG_VERSION environment variable to 1.25.7.
  • examples/golang/avro-checksum-verification/go.mod
    • Updated the required Go version to 1.25.7.
  • examples/golang/canal-json-handle-key-only/go.mod
    • Updated the required Go version to 1.25.7.
  • go.mod
    • Updated the required Go version to 1.25.7.
    • Updated the filippo.io/edwards25519 dependency to v1.1.1.
  • go.sum
    • Updated the checksums for the filippo.io/edwards25519 dependency.
  • tests/integration_tests/debezium/go.mod
    • Updated the required Go version to 1.25.7.
  • tools/check/go.mod
    • Updated the required Go version to 1.25.7.
Activity
  • No human activity has been recorded on this pull request yet.
Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.

You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@ti-chi-bot ti-chi-bot bot added the size/S Denotes a PR that changes 10-29 lines, ignoring generated files. label Mar 13, 2026
Copy link

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates third-party dependencies, including bumping the Go version string and updating filippo.io/edwards25519. My review has identified a critical issue in the integration-test.Dockerfile where an invalid Go version is used, which will break the Docker build. I've also pointed out that the Go version specified in several go.mod files is not a valid Go language version and should be corrected to follow the standard format (e.g., go 1.22).


# Download go into /usr/local dir.
ENV GOLANG_VERSION 1.25.6
ENV GOLANG_VERSION 1.25.7

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The Go version 1.25.7 is not a valid Go version available for download from dl.google.com. This will cause the Docker build to fail with a 404 error. The previous version 1.25.6 was also invalid. Please use a valid Go version. For example, if you intend to use Go 1.22.5, you should change this to 1.22.5.

ENV GOLANG_VERSION 1.22.5

module avro-checksum-sample

go 1.25.6
go 1.25.7

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The go directive specifies the Go language version and should be a valid version like 1.21 or 1.22. The version 1.25.7 is not a valid Go language version, and the previous 1.25.6 was also invalid. While the go tool might tolerate this, it's incorrect and can cause issues with other tooling. Please use the major Go version you are targeting. Based on your dependencies, 1.22 seems appropriate.

Suggested change
go 1.25.7
go 1.22
References
  1. The go directive in a go.mod file must specify a valid Go language version (e.g., '1.21', '1.22'). This ensures compatibility and proper functioning of Go tooling.

module canal-json-handle-key-only-example

go 1.25.6
go 1.25.7

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The go directive specifies the Go language version and should be a valid version like 1.21 or 1.22. The version 1.25.7 is not a valid Go language version, and the previous 1.25.6 was also invalid. While the go tool might tolerate this, it's incorrect and can cause issues with other tooling. Please use the major Go version you are targeting. Based on your dependencies, 1.22 seems appropriate.

Suggested change
go 1.25.7
go 1.22
References
  1. The go directive in a go.mod file must specify a valid Go language version (e.g., '1.21', '1.22'). This ensures compatibility and proper functioning of Go tooling.

module github.com/breezewish/checker

go 1.25.6
go 1.25.7

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The go directive specifies the Go language version and should be a valid version like 1.21 or 1.22. The version 1.25.7 is not a valid Go language version, and the previous 1.25.6 was also invalid. While the go tool might tolerate this, it's incorrect and can cause issues with other tooling. Please use the major Go version you are targeting. Based on your dependencies, 1.22 seems appropriate.

Suggested change
go 1.25.7
go 1.22
References
  1. The go directive in a go.mod file must specify a valid Go language version (e.g., '1.21', '1.22'). This ensures compatibility and proper functioning of Go tooling.

module github.com/pingcap/tidb-cdc/_tools

go 1.25.6
go 1.25.7

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

The go directive specifies the Go language version and should be a valid version like 1.21 or 1.22. The version 1.25.7 is not a valid Go language version, and the previous 1.25.6 was also invalid. While the go tool might tolerate this, it's incorrect and can cause issues with other tooling. Please use the major Go version you are targeting. Based on your dependencies, 1.22 seems appropriate.

Suggested change
go 1.25.7
go 1.22
References
  1. The go directive in a go.mod file must specify a valid Go language version (e.g., '1.21', '1.22'). This ensures compatibility and proper functioning of Go tooling.

@codecov
Copy link

codecov bot commented Mar 13, 2026

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 57.2944%. Comparing base (d16456b) to head (66d9afc).
⚠️ Report is 1 commits behind head on master.
✅ All tests successful. No failed tests found.

❌ Your project check has failed because the head coverage (57.2944%) is below the target coverage (60.0000%). You can increase the head coverage or adjust the target coverage.

Additional details and impacted files
Components Coverage Δ
cdc 57.2944% <ø> (∅)
dm ∅ <ø> (∅)
engine ∅ <ø> (∅)
Flag Coverage Δ
cdc 57.2944% <ø> (?)
unit 57.2944% <ø> (+7.8186%) ⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

@@               Coverage Diff                @@
##             master     #12560        +/-   ##
================================================
+ Coverage   49.4757%   57.2944%   +7.8186%     
================================================
  Files           486        524        +38     
  Lines         70677      69183      -1494     
================================================
+ Hits          34968      39638      +4670     
+ Misses        32951      26689      -6262     
- Partials       2758       2856        +98     
🚀 New features to boost your workflow:
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@wk989898
Copy link
Collaborator Author

/retest

@ti-chi-bot ti-chi-bot bot added needs-1-more-lgtm Indicates a PR needs 1 more LGTM. approved labels Mar 16, 2026
@ti-chi-bot ti-chi-bot bot added lgtm and removed needs-1-more-lgtm Indicates a PR needs 1 more LGTM. labels Mar 16, 2026
@ti-chi-bot
Copy link
Contributor

ti-chi-bot bot commented Mar 16, 2026

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: 3AceShowHand, wlwilliamx

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:
  • OWNERS [3AceShowHand,wlwilliamx]

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@ti-chi-bot
Copy link
Contributor

ti-chi-bot bot commented Mar 16, 2026

[LGTM Timeline notifier]

Timeline:

  • 2026-03-16 03:34:03.82669737 +0000 UTC m=+155170.914354917: ☑️ agreed by wlwilliamx.
  • 2026-03-16 03:35:43.55193211 +0000 UTC m=+155270.639589647: ☑️ agreed by 3AceShowHand.

@wk989898
Copy link
Collaborator Author

/retest

@ti-chi-bot ti-chi-bot bot added the needs-cherry-pick-release-8.5 Should cherry pick this PR to release-8.5 branch. label Mar 16, 2026
Signed-off-by: wk989898 <nhsmwk@gmail.com>
@wk989898
Copy link
Collaborator Author

/retest

1 similar comment
@wk989898
Copy link
Collaborator Author

/retest

@lybcodes
Copy link

/test pull-verify

Signed-off-by: wk989898 <nhsmwk@gmail.com>
@ti-chi-bot ti-chi-bot bot added size/L Denotes a PR that changes 100-499 lines, ignoring generated files. and removed size/S Denotes a PR that changes 10-29 lines, ignoring generated files. labels Mar 17, 2026
@OliverS929
Copy link
Contributor

/retest

@wk989898
Copy link
Collaborator Author

/test pull-unit-test-cdc

@wk989898
Copy link
Collaborator Author

/retest

2 similar comments
@wk989898
Copy link
Collaborator Author

/retest

@wk989898
Copy link
Collaborator Author

/retest

@wk989898
Copy link
Collaborator Author

/retest

1 similar comment
@wk989898
Copy link
Collaborator Author

/retest

@ti-chi-bot
Copy link
Contributor

ti-chi-bot bot commented Mar 19, 2026

@wk989898: The following test failed, say /retest to rerun all failed tests or /retest-required to rerun all mandatory failed tests:

Test name Commit Details Required Rerun command
pull-unit-test-cdc 5414ebc link true /test pull-unit-test-cdc

Full PR test history. Your PR dashboard.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository. I understand the commands that are listed here.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

approved lgtm needs-cherry-pick-release-8.5 Should cherry pick this PR to release-8.5 branch. release-note Denotes a PR that will be considered when it comes time to generate release notes. size/L Denotes a PR that changes 100-499 lines, ignoring generated files.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Outdated third-party dependencies need to be upgraded.

5 participants