Skip to content

Comments

chore(deps): bump the dependencies group with 2 updates#492

Merged
k1LoW merged 1 commit intomainfrom
dependabot/go_modules/dependencies-a20e760cf7
Feb 2, 2026
Merged

chore(deps): bump the dependencies group with 2 updates#492
k1LoW merged 1 commit intomainfrom
dependabot/go_modules/dependencies-a20e760cf7

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 1, 2026

Bumps the dependencies group with 2 updates: github.com/google/cel-go and google.golang.org/api.

Updates github.com/google/cel-go from 0.26.1 to 0.27.0

Release notes

Sourced from github.com/google/cel-go's releases.

Release v0.27.0

Release Summary

This release focuses on improving developer tooling and stability. Key highlights include significant enhancements to the REPL (YAML configuration support and parse-only evaluation), the addition of cost estimation for regex operations, and improved test coverage reporting.

On the stability front, this release addresses race conditions in reference types, improves namespace resolution, and ensures formatting directives align strictly with the CEL specification.

Note: This release includes a breaking change regarding how types are handled as variables. Please review the "Breaking Changes" section below.

⚠ Breaking Changes

Remove types as variables: The logic for handling types has been relaxed to support safe rollout of feature packages which introduce new types whose names may collide with existing variables. Please review your policies if you relied on types behaving strictly as variables in previous versions. [PR #1262](google/cel-go#1262)

Features & Enhancements

REPL & Tooling

Core Library

  • Regex Costing: Added support for cost estimation and tracking within the regex library. [PR #1200](google/cel-go#1200)

  • JSON Type Exposure: Exposed CEL JSON types to assist developers in converting to native values. [PR #1261](google/cel-go#1261)

  • Policy Composition: Source information is now preserved during CEL policy composition, aiding in debugging. [PR #1253](google/cel-go#1253)

Extensibility:

  • Updated extension option factory to resolve by ID (#1249).

  • Refactored match output compiling to accept user-defined logic (#1246).

  • Exposed Match source ID to callers (#1227).

Build & Maintenance

Bug Fixes

... (truncated)

Commits
  • 450089b Preserve source information during CEL policy composition. (#1253)
  • c66b313 Remove types as variables to allow user-defined variables to shadow type decl...
  • bff3a72 Expose the CEL JSON types to assist with conversion to native values (#1261)
  • 559cbc9 Remove errant diff checked into a prior PR (#1260)
  • fe26efa Simplify the disambiguation logic to a single boolean (#1263)
  • 52280ba Clean up unused source info after checker rewrites the AST. (#1258)
  • 3cb5705 Namespace resolution fix (#1256)
  • 409bcbe Refactor match output compiling to accept user-defined logic. (#1246)
  • e9f15ea Enable two var comprehension conformance tests. (#1255)
  • 057fa1a Add parse only evaluation to REPL (#1254)
  • Additional commits viewable in compare view

Updates google.golang.org/api from 0.262.0 to 0.264.0

Release notes

Sourced from google.golang.org/api's releases.

v0.264.0

0.264.0 (2026-01-29)

Features

v0.263.0

0.263.0 (2026-01-27)

Features

Changelog

Sourced from google.golang.org/api's changelog.

0.264.0 (2026-01-29)

Features

0.263.0 (2026-01-27)

Features

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the dependencies group with 2 updates: [github.com/google/cel-go](https://github.com/google/cel-go) and [google.golang.org/api](https://github.com/googleapis/google-api-go-client).


Updates `github.com/google/cel-go` from 0.26.1 to 0.27.0
- [Release notes](https://github.com/google/cel-go/releases)
- [Commits](google/cel-go@v0.26.1...v0.27.0)

Updates `google.golang.org/api` from 0.262.0 to 0.264.0
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.262.0...v0.264.0)

---
updated-dependencies:
- dependency-name: github.com/google/cel-go
  dependency-version: 0.27.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
- dependency-name: google.golang.org/api
  dependency-version: 0.264.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code minor labels Feb 1, 2026
@github-actions
Copy link
Contributor

github-actions bot commented Feb 1, 2026

Code Metrics Report

main (1958263) #492 (3eaefcc) +/-
Coverage 33.8% 33.8% 0.0%
Code to Test Ratio 1:0.9 1:0.9 0.0
Test Execution Time 10s 10s 0s
Details
  |                     | main (1958263) | #492 (3eaefcc) | +/-  |
  |---------------------|----------------|----------------|------|
  | Coverage            |          33.8% |          33.8% | 0.0% |
  |   Files             |             31 |             31 |    0 |
  |   Lines             |           3405 |           3405 |    0 |
  |   Covered           |           1151 |           1151 |    0 |
  | Code to Test Ratio  |          1:0.9 |          1:0.9 |  0.0 |
  |   Code              |           7020 |           7020 |    0 |
  |   Test              |           6581 |           6581 |    0 |
  | Test Execution Time |            10s |            10s |   0s |

Reported by octocov

@k1LoW k1LoW merged commit d11a0f7 into main Feb 2, 2026
7 checks passed
@k1LoW k1LoW deleted the dependabot/go_modules/dependencies-a20e760cf7 branch February 2, 2026 00:49
@github-actions github-actions bot mentioned this pull request Feb 2, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code minor

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant