Skip to content

Revert "build(deps): bump the go_modules group across 1 directory with 2 updates"#47

Merged
programmersd21 merged 1 commit intomainfrom
revert-46-dependabot/go_modules/go_modules-9b9e6dee65
May 8, 2026
Merged

Revert "build(deps): bump the go_modules group across 1 directory with 2 updates"#47
programmersd21 merged 1 commit intomainfrom
revert-46-dependabot/go_modules/go_modules-9b9e6dee65

Conversation

@programmersd21
Copy link
Copy Markdown
Owner

@programmersd21 programmersd21 commented May 8, 2026

Reverts #46

Summary by Sourcery

Build:

  • Revert recent version bumps for several indirect Go modules (cloud.google.com/go/compute/metadata, golang.org/x/, google.golang.org/) back to their prior versions in go.mod.

@sourcery-ai
Copy link
Copy Markdown

sourcery-ai Bot commented May 8, 2026

Reviewer's guide (collapsed on small PRs)

Reviewer's Guide

This PR reverts a previous dependency bump by downgrading several Go module indirect dependencies in go.mod (and corresponding entries in go.sum) back to their earlier versions, restoring the dependency state prior to PR #46.

File-Level Changes

Change Details Files
Revert dependency version bumps and restore prior Go module versions.
  • Lower cloud.google.com/go/compute/metadata to v0.5.0 from v0.9.0
  • Lower golang.org/x/crypto to v0.36.0 from v0.46.0
  • Lower golang.org/x/net to v0.38.0 from v0.48.0
  • Lower golang.org/x/sync to v0.15.0 from v0.19.0
  • Lower golang.org/x/sys to v0.34.0 from v0.39.0
  • Lower golang.org/x/term to v0.31.0 from v0.38.0
  • Lower golang.org/x/text to v0.24.0 from v0.32.0
  • Lower google.golang.org/genproto/googleapis/rpc to v0.0.0-20240903143218-8af14fe29dc1 from v0.0.0-20251202230838-ff82c1b0f217
  • Lower google.golang.org/grpc to v1.66.2 from v1.79.3
  • Lower google.golang.org/protobuf to v1.34.2 from v1.36.10
  • Update go.sum to match the restored versions of the above modules
go.mod
go.sum

Tips and commands

Interacting with Sourcery

  • Trigger a new review: Comment @sourcery-ai review on the pull request.
  • Continue discussions: Reply directly to Sourcery's review comments.
  • Generate a GitHub issue from a review comment: Ask Sourcery to create an
    issue from a review comment by replying to it. You can also reply to a
    review comment with @sourcery-ai issue to create an issue from it.
  • Generate a pull request title: Write @sourcery-ai anywhere in the pull
    request title to generate a title at any time. You can also comment
    @sourcery-ai title on the pull request to (re-)generate the title at any time.
  • Generate a pull request summary: Write @sourcery-ai summary anywhere in
    the pull request body to generate a PR summary at any time exactly where you
    want it. You can also comment @sourcery-ai summary on the pull request to
    (re-)generate the summary at any time.
  • Generate reviewer's guide: Comment @sourcery-ai guide on the pull
    request to (re-)generate the reviewer's guide at any time.
  • Resolve all Sourcery comments: Comment @sourcery-ai resolve on the
    pull request to resolve all Sourcery comments. Useful if you've already
    addressed all the comments and don't want to see them anymore.
  • Dismiss all Sourcery reviews: Comment @sourcery-ai dismiss on the pull
    request to dismiss all existing Sourcery reviews. Especially useful if you
    want to start fresh with a new review - don't forget to comment
    @sourcery-ai review to trigger a new review!

Customizing Your Experience

Access your dashboard to:

  • Enable or disable review features such as the Sourcery-generated pull request
    summary, the reviewer's guide, and others.
  • Change the review language.
  • Add, remove or edit custom review instructions.
  • Adjust other review settings.

Getting Help

@programmersd21 programmersd21 merged commit 77a8c51 into main May 8, 2026
3 checks passed
Copy link
Copy Markdown

@sourcery-ai sourcery-ai Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hey - I've left some high level feedback:

  • Since this reverts several core networking/crypto libraries (golang.org/x/*, grpc, protobuf), consider adding a brief rationale in the commit or PR description (e.g., specific regression or incompatibility) so future maintainers understand why these versions were intentionally downgraded.
  • Double-check that go.sum is fully aligned with the reverted go.mod versions (no leftover entries from the newer dependencies) to avoid subtle build or vendoring inconsistencies.
Prompt for AI Agents
Please address the comments from this code review:

## Overall Comments
- Since this reverts several core networking/crypto libraries (golang.org/x/*, grpc, protobuf), consider adding a brief rationale in the commit or PR description (e.g., specific regression or incompatibility) so future maintainers understand why these versions were intentionally downgraded.
- Double-check that go.sum is fully aligned with the reverted go.mod versions (no leftover entries from the newer dependencies) to avoid subtle build or vendoring inconsistencies.

Sourcery is free for open source - if you like our reviews please consider sharing them ✨
Help me be more useful! Please click 👍 or 👎 on each comment and I'll use the feedback to improve your reviews.

Copy link
Copy Markdown

@gemini-code-assist gemini-code-assist Bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request downgrades several Go dependencies and removes others, such as OpenTelemetry and logr. The reviewer identified that many of the specified versions for golang.org/x packages do not exist in upstream repositories, which will lead to build failures. It is recommended to use go mod tidy to resolve dependencies and update go.sum automatically rather than manually editing these files.

Comment thread go.mod
github.com/yuin/goldmark-emoji v1.0.5 // indirect
go.opencensus.io v0.24.0 // indirect
golang.org/x/crypto v0.46.0 // indirect
golang.org/x/crypto v0.36.0 // indirect
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

high

The version v0.36.0 for golang.org/x/crypto (and several other versions in this block such as sys v0.34.0, net v0.38.0, sync v0.15.0, term v0.31.0, and text v0.24.0) do not currently exist in the upstream repositories. Reverting to these non-existent versions will cause build failures as the Go toolchain will be unable to resolve them. It is highly recommended to run go mod tidy to allow the Go toolchain to automatically resolve the correct, existing versions for these dependencies.

Comment thread go.sum
Comment on lines +8 to +9
cloud.google.com/go/compute/metadata v0.5.0 h1:Zr0eK8JbFv6+Wi4ilXAR8FJ3wyNdpxHKJNPos6LTZOY=
cloud.google.com/go/compute/metadata v0.5.0/go.mod h1:aHnloV2TPI38yx4s9+wAZhHykWvVCfu7hQbF+9CWoiY=
Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

medium

Manually editing go.sum is discouraged as it is error-prone and can lead to checksum mismatch errors. It is recommended to let the Go toolchain manage this file by running go mod tidy after updating go.mod, which will automatically update go.sum with the correct checksums for the resolved dependency tree.

@programmersd21 programmersd21 deleted the revert-46-dependabot/go_modules/go_modules-9b9e6dee65 branch May 8, 2026 12:13
@programmersd21 programmersd21 self-assigned this May 8, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant