chore: update version as recommended by dependabot by lalitadithya · Pull Request #329 · NVIDIA/NVSentinel

lalitadithya · 2025-11-10T19:25:03Z

Summary

update version as recommended by dependabot

Type of Change

Component(s) Affected

Testing

Tests pass locally
Manual testing completed
No breaking changes (or documented)

Checklist

Self-review completed
Documentation updated (if needed)
Ready for review

Summary by CodeRabbit

Chores
- Updated GitHub Release workflow action to v2.4.2
- Updated Go module dependencies for AWS SDK and Google APIs to latest patch versions
- Updated Python development dependencies for code formatting and testing tools

Bumps [softprops/action-gh-release](https://github.com/softprops/action-gh-release) from 2.4.1 to 2.4.2. - [Release notes](https://github.com/softprops/action-gh-release/releases) - [Changelog](https://github.com/softprops/action-gh-release/blob/master/CHANGELOG.md) - [Commits](softprops/action-gh-release@6da8fa9...5be0e66) --- updated-dependencies: - dependency-name: softprops/action-gh-release dependency-version: 2.4.2 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [github.com/aws/aws-sdk-go-v2/config](https://github.com/aws/aws-sdk-go-v2) from 1.31.16 to 1.31.17. - [Release notes](https://github.com/aws/aws-sdk-go-v2/releases) - [Changelog](https://github.com/aws/aws-sdk-go-v2/blob/main/changelog-template.json) - [Commits](aws/aws-sdk-go-v2@config/v1.31.16...config/v1.31.17) --- updated-dependencies: - dependency-name: github.com/aws/aws-sdk-go-v2/config dependency-version: 1.31.17 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.254.0 to 0.255.0. - [Release notes](https://github.com/googleapis/google-api-go-client/releases) - [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md) - [Commits](googleapis/google-api-go-client@v0.254.0...v0.255.0) --- updated-dependencies: - dependency-name: google.golang.org/api dependency-version: 0.255.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [black](https://github.com/psf/black) from 24.10.0 to 25.11.0. - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@24.10.0...25.11.0) --- updated-dependencies: - dependency-name: black dependency-version: 25.11.0 dependency-type: direct:development update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [googleapis-common-protos](https://github.com/googleapis/google-cloud-python) from 1.71.0 to 1.72.0. - [Release notes](https://github.com/googleapis/google-cloud-python/releases) - [Changelog](https://github.com/googleapis/google-cloud-python/blob/main/packages/google-cloud-documentai/CHANGELOG.md) - [Commits](googleapis/google-cloud-python@googleapis-common-protos-v1.71.0...googleapis-common-protos-v1.72.0) --- updated-dependencies: - dependency-name: googleapis-common-protos dependency-version: 1.72.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

Bumps [black](https://github.com/psf/black) from 25.9.0 to 25.11.0. - [Release notes](https://github.com/psf/black/releases) - [Changelog](https://github.com/psf/black/blob/main/CHANGES.md) - [Commits](psf/black@25.9.0...25.11.0) --- updated-dependencies: - dependency-name: black dependency-version: 25.11.0 dependency-type: direct:development update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>

coderabbitai · 2025-11-10T19:25:13Z

Walkthrough

Dependency updates across multiple modules: GitHub Actions release workflow bumped to a newer patch version, Go module dependencies in the CSP health monitor updated to patch versions, and Python development dependencies in GPU health monitor and log collector upgraded to minor/patch versions.

Changes

Cohort / File(s)	Summary
GitHub Workflow Action `.github/workflows/release.yml`	Updated softprops/action-gh-release from v2.4.1 to v2.4.2
Go Module Dependencies `health-monitors/csp-health-monitor/go.mod`	Updated aws-sdk-go-v2 config, credentials, imds, and service modules; google.golang.org/api and genproto to patch versions
Python Development Dependencies `health-monitors/gpu-health-monitor/pyproject.toml`	Updated black (24.4.2 → 25.11.0), coverage (7.5.4 → 7.11.3), pytest (8.2.2 → 9.0.0)
Python Development Dependencies `log-collector/pyproject.toml`	Updated black (25.9.0 → 25.11.0), coverage (7.11.0 → 7.11.3), pytest (8.2.2 → 9.0.0)

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

All changes are straightforward dependency version bumps with no logic modifications
No breaking changes indicated in patch/minor version updates
Consistent pattern across all files simplifies review

Poem

🐰 Hop hop, the deps are new,
Version bumps in every queue,
Security and features bright,
Keep our tools updated right! ✨

Pre-merge checks and finishing touches

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately describes the main change: updating dependency versions as recommended by dependabot across multiple files (.github/workflows/release.yml, go.mod, and pyproject.toml files).
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch merge-dependabot-updates-4

📜 Recent review details

Configuration used: Path: .coderabbit.yaml

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 9647dd0 and 936781b.

⛔ Files ignored due to path filters (3)

health-monitors/csp-health-monitor/go.sum is excluded by !**/*.sum
health-monitors/gpu-health-monitor/poetry.lock is excluded by !**/*.lock
log-collector/poetry.lock is excluded by !**/*.lock

📒 Files selected for processing (4)

.github/workflows/release.yml (1 hunks)
health-monitors/csp-health-monitor/go.mod (3 hunks)
health-monitors/gpu-health-monitor/pyproject.toml (1 hunks)
log-collector/pyproject.toml (1 hunks)

🔇 Additional comments (4)

.github/workflows/release.yml (1)

138-138: LGTM — patch version bump for release action.

The update from v2.4.1 to v2.4.2 is a patch-level change with no modifications to step inputs or workflow logic, which is a standard safe update.

health-monitors/csp-health-monitor/go.mod (1)

12-12: LGTM — patch-level Go module updates.

All Go module dependency updates are patch-level versions or pseudo-version updates, which are low-risk and typically include security patches and bug fixes. The coordinated updates across AWS SDK v2 and Google API packages suggest a standard maintenance release from Dependabot.

Also applies to: 21-21, 24-24, 39-40, 44-48

log-collector/pyproject.toml (1)

13-15: No test suite or custom pytest configuration found in log-collector—pytest 9.0.0 update is safe.

The project has no test files or custom pytest configuration in the log-collector directory. The Python version requirement (^3.10) is compatible with pytest 9.0's minimum. All three dependency updates (black, coverage, and pytest) are low-risk for this CLI tool. The pytest major version bump carries no compatibility risk here since there are no tests to break.

health-monitors/gpu-health-monitor/pyproject.toml (1)

18-20: No issues found after verification.

The pytest 9.0.0 upgrade is compatible with this codebase. The conftest.py uses standard @pytest.fixture patterns that are stable across pytest versions, and no custom pytest configuration conflicts with 9.0.0. The black 25.x upgrade only affects code formatting (style changes), not functionality. Both dependencies are safe to upgrade.

Warning

There were issues while running some tools. Please review the errors and either fix the tool's configuration or disable the tool if it's a critical failure.

🔧 golangci-lint (2.5.0)

level=error msg="[linters_context] typechecking error: pattern ./...: directory prefix . does not contain main module or its selected dependencies"

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

dependabot Bot and others added 7 commits November 11, 2025 00:53

chore: pull in python changes

936781b

lalitadithya enabled auto-merge (squash) November 10, 2025 19:30

lalitadithya self-assigned this Nov 10, 2025

lalitadithya requested a review from mchmarny November 10, 2025 19:34

lalitadithya added this to the v0.4.0 milestone Nov 10, 2025

mchmarny approved these changes Nov 10, 2025

View reviewed changes

lalitadithya merged commit ec6dc7f into main Nov 10, 2025
32 checks passed

lalitadithya deleted the merge-dependabot-updates-4 branch April 16, 2026 13:52

This was referenced May 15, 2026

[Feature]: Automate Fern version registration on docs tag push #1289

Closed

feat(ci): automate Fern version registration and harden publish workflow #1290

Merged

[Feature]: Automate Fern version registration on release tags with N-3 pruning #1291

Closed

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

chore: update version as recommended by dependabot#329

chore: update version as recommended by dependabot#329
lalitadithya merged 7 commits into
mainfrom
merge-dependabot-updates-4

lalitadithya commented Nov 10, 2025 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Nov 10, 2025 •

edited

Loading

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Uh oh!

Conversation

lalitadithya commented Nov 10, 2025 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Type of Change

Component(s) Affected

Testing

Checklist

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Nov 10, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Poem

Pre-merge checks and finishing touches

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

lalitadithya commented Nov 10, 2025 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Nov 10, 2025 •

edited

Loading