AB#530382: dependency updates - #116
Conversation
There was a problem hiding this comment.
⚠️ Not ready to approve
The go.mod go directive is set to 1.25.0, which is not a valid go directive format for the Go toolchain and can break builds/CI.
Pull request overview
This PR updates the project’s Go toolchain configuration and bumps several Go module dependencies, aligning GitHub Actions workflows to derive the Go version directly from go.mod.
Changes:
- Updated
go.modGo version and bumped selected direct/indirect dependencies (e.g.,stretchr/testify, OpenTelemetry,x/*, gRPC/protobuf). - Refreshed
go.sumto reflect the updated module graph/checksums. - Updated GitHub Actions workflows to use
actions/setup-go@v5withgo-version-file: go.mod.
File summaries
| File | Description |
|---|---|
| go.mod | Updates Go version and dependency versions. |
| go.sum | Updates module checksums to match the new dependency graph. |
| .github/workflows/ci.yml | Uses go-version-file so CI tracks the Go version declared in go.mod. |
| .github/workflows/veracode-upload-and-scan.yml | Uses go-version-file so Veracode workflow tracks the Go version declared in go.mod. |
Copilot's findings
- Files reviewed: 3/4 changed files
- Comments generated: 1
Note
Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.
💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.
There was a problem hiding this comment.
⚠️ Not ready to approve
The Veracode workflow still uses the deprecated actions/checkout@v3, which should be updated to @v4 to avoid Node 16 deprecation breakage.
Copilot's findings
- Files reviewed: 3/4 changed files
- Comments generated: 1
Note
Your feedback helps us improve the quality of this feature.
Please use 👍 or 👎 to tell us whether this assessment is correct.
Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>
Issue Link
https://dev.azure.com/nintex/Nintex/_workitems/edit/530382
High-Level Description
Updates dependencies in Picard!
Changelog:
.github/workflows/ci.yml: Update go version to matchgo.mod..github/workflows/veracode-upload-and-scan.yml: Update go version to matchgo.mod.go.mod: Update dependency version.go.sum: Update package control.