Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

deps: update dependencies for all modules #7987

Open
wants to merge 5 commits into
base: master
Choose a base branch
from

Conversation

eshitachandwani
Copy link
Member

  • Update dependencies
  • Update protos

RELEASE NOTES: None

@eshitachandwani eshitachandwani added the Type: Dependencies Updating/adding/removing dependencies label Jan 8, 2025
@eshitachandwani eshitachandwani added this to the 1.71 Release milestone Jan 8, 2025
Copy link

codecov bot commented Jan 8, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 82.06%. Comparing base (2d4daf3) to head (f2c453e).

Additional details and impacted files
@@            Coverage Diff             @@
##           master    #7987      +/-   ##
==========================================
+ Coverage   82.00%   82.06%   +0.06%     
==========================================
  Files         381      381              
  Lines       38539    38539              
==========================================
+ Hits        31602    31627      +25     
+ Misses       5612     5593      -19     
+ Partials     1325     1319       -6     

see 21 files with indirect coverage changes

go.mod Outdated
go 1.22
go 1.22.0

toolchain go1.23.4
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

How did this get added? Is is due to a dependency specifying this or does it come from your locally installed toolchain?

Copy link
Contributor

@arjan-bal arjan-bal Jan 8, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We need to support go.1.22 until go1.24 is released. I think we should restrict the go and toolchain directives to use strictly less than 1.23.

Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It got added automatically when running the script. It gets added when running go mod for go version higher than v1.21 , but it is not necessary and if not present will be assumed to have version same as mentioned in go line above. So I am removing it.

@arjan-bal
Copy link
Contributor

I just merged #7974, can you please rebase and re-run the script?

@@ -1,64 +1,65 @@
module google.golang.org/grpc/gcp/observability

go 1.22
go 1.22.7
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

 $ grep -ra "go 1.22.7" "$HOME/go/pkg/mod" --include="go.mod" 
<omitted>/go/pkg/mod/google.golang.org/grpc/stats/opentelemetry@v0.0.0-20241028142157-ada6787
961b3/go.mod:go 1.22.7
<omitted>/go/pkg/mod/google.golang.org/grpc/reflection/test@v0.0.0-20241010040347-00b9e140ce7
1/go.mod:go 1.22.7
<omitted>/go/pkg/mod/go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelg
rpc@v0.58.0/go.mod:go 1.22.7

The reason for the dependency bump is opentelemetry. They updated to grpc-go 1.68.0 due to which they got the minor version in their go.mod files: https://github.com/open-telemetry/opentelemetry-go-contrib/pull/6306/files

The minor version was dropped in grpc-go 1.68.1. I think we should ask them to remove the minor version as well.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I've raised open-telemetry/opentelemetry-go-contrib#6595 on the Otel repo.

Copy link
Contributor

@arjan-bal arjan-bal Jan 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can you use a lower version of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc for now?

Copy link
Member Author

@eshitachandwani eshitachandwani Jan 10, 2025

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Okay, changed the version of go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelg to v0.56.0 as grpc-go 1.68.0 was introduced in v0.57.0

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Thanks, I've opened #8002 to track the version bump of this module.

examples/go.mod Outdated Show resolved Hide resolved
interop/observability/go.mod Outdated Show resolved Hide resolved
security/advancedtls/examples/go.mod Outdated Show resolved Hide resolved
security/advancedtls/go.mod Outdated Show resolved Hide resolved
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Type: Dependencies Updating/adding/removing dependencies
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants