Skip to content

chore: bump direct Go dependencies#3759

Merged
dgageot merged 5 commits into
docker:mainfrom
dgageot:bump-go-dependencies
Jul 20, 2026
Merged

chore: bump direct Go dependencies#3759
dgageot merged 5 commits into
docker:mainfrom
dgageot:bump-go-dependencies

Conversation

@dgageot

@dgageot dgageot commented Jul 20, 2026

Copy link
Copy Markdown
Member

Routine bump of direct Go dependencies. Each module was updated in its own commit and validated with task lint and task test.

One pre-existing lint failure (go-mutex-unlock-without-defer in pkg/tools/builtin/webhook/webhook.go) blocked validation and was fixed first with a dedicated commit that converts the bare mu.Unlock() calls in setRuntime to defer.

The google.golang.org/adk module was intentionally skipped: v1.5.0 deprecates server/adka2a in favour of adka2a/v2, which requires a non-trivial migration to an incompatible iterator-based a2a-go/v2 API.

Module From To Status
github.com/charmbracelet/ultraviolet v0.0.0-20260713092251-4bee1914c0cf v0.0.0-20260720091822-7cc6674724ac bumped
github.com/dop251/goja v0.0.0-20260701091749-b07b74453ea9 v0.0.0-20260719185829-0fc1d42c1dc9 bumped
github.com/junegunn/fzf v0.74.0 v0.74.1 bumped
github.com/openai/openai-go/v3 v3.43.0 v3.44.0 bumped
google.golang.org/adk v1.2.0 v1.5.0 skipped — deprecates server/adka2a in favour of adka2a/v2, which requires a non-trivial migration to the incompatible iterator-based a2a-go/v2 API

dgageot added 5 commits July 20, 2026 14:16
…4bee1914c0cf to v0.0.0-20260720091822-7cc6674724ac

Assisted-By: docker-agent
…o v0.0.0-20260719185829-0fc1d42c1dc9

Assisted-By: docker-agent
@dgageot
dgageot requested a review from a team as a code owner July 20, 2026 12:28

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

Routine dependency-bump PR. The defer mu.Unlock() fix in webhook.go is semantically correct: setRuntime has no early returns or loops, and the critical section is a single assignment (t.rt = rt), so deferring the unlock does not extend lock hold time. Dependency version increments are patch/minor bumps with no code changes in this repo. No bugs introduced.

@aheritier aheritier added area/deps Dependency updates and version bumps area/tools For features/issues/fixes related to the usage of built-in and MCP tools kind/chore Maintenance, deps, CI, tooling (maps to chore: commit prefix) labels Jul 20, 2026
@dgageot
dgageot merged commit 36a5a74 into docker:main Jul 20, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/deps Dependency updates and version bumps area/tools For features/issues/fixes related to the usage of built-in and MCP tools kind/chore Maintenance, deps, CI, tooling (maps to chore: commit prefix)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants