Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(deps): bump cloud.google.com/go/dialogflow from 1.55.0 to 1.57.0 #319

Merged

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Aug 21, 2024

Bumps cloud.google.com/go/dialogflow from 1.55.0 to 1.57.0.

Release notes

Sourced from cloud.google.com/go/dialogflow's releases.

dialogflow: v1.57.0

1.57.0 (2024-08-20)

Features

  • dialogflow: Add support for Go 1.23 iterators (84461c0)
Commits
  • 8efa03a chore(main): release spanner 1.57.0 (#9337)
  • 7ff5356 fix(spanner): SelectAll struct fields match should be case-insensitive (#9417)
  • f377281 fix(spanner): internal test package should import local version (#9416)
  • 8c76415 chore(main): release storage 1.38.0 (#9336)
  • 36d788b chore(main): release bigquery 1.59.1 (#9412)
  • 4ac005d fix(bigquery): align return time.Time values to UTC (#9411)
  • ae8c7b7 chore: release main (#9384)
  • f049c97 fix(aiplatform): remove field max_wait_duration from message Scheduling (#9...
  • f7170e2 chore: update CI to turn gowork setting off for build/test (#9396)
  • 530d273 chore(main): release vertexai 0.7.1 (#9395)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

  • New Features

    • Updated dependencies to enhance functionality, improve security, and optimize performance across the application.
  • Bug Fixes

    • Upgraded libraries for better stability and potential bug fixes, including updates to Dialogflow and Google API dependencies.
  • Chores

    • Routine maintenance of dependency versions to ensure the application remains current and effective.

Bumps [cloud.google.com/go/dialogflow](https://github.com/googleapis/google-cloud-go) from 1.55.0 to 1.57.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.55.0...spanner/v1.57.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/dialogflow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Copy link

coderabbitai bot commented Aug 21, 2024

Important

Review skipped

Auto reviews are disabled on base/target branches other than the default branch.

Please check the settings in the CodeRabbit UI or the .coderabbit.yaml file in this repository. To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Walkthrough

The updates made to the go.mod file primarily involve version upgrades for several key dependencies, enhancing functionality and security. Noteworthy changes include updates to the Dialogflow library and Google APIs, alongside improvements in OpenTelemetry instrumentation for better observability. Additional indirect dependencies were also upgraded, ensuring the application remains current and robust.

Changes

Files/Dependencies Changes Summary
cloud.google.com/go/dialogflow, google.golang.org/api Upgraded to v1.57.0 and v0.193.0, respectively.
cloud.google.com/go, cloud.google.com/go/auth, cloud.google.com/go/iam, cloud.google.com/go/longrunning Indirect updates for various optimizations.
go.opentelemetry.io/contrib/..., go.opentelemetry.io/otel, golang.org/x/... Significant version upgrades for enhanced observability.
google.golang.org/genproto/..., google.golang.org/grpc Versions updated to improve functionalities.

Poem

Hop along, we upgrade with glee,
New features bloom like a vibrant spree.
Dependencies fresh, oh what a delight,
In the coding garden, everything feels right.
With every change, our code takes flight! 🐇✨


Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?

Share
Tips

Chat

There are 3 ways to chat with CodeRabbit:

  • Review comments: Directly reply to a review comment made by CodeRabbit. Example:
    • I pushed a fix in commit <commit_id>.
    • Generate unit testing code for this file.
    • Open a follow-up GitHub issue for this discussion.
  • Files and specific lines of code (under the "Files changed" tab): Tag @coderabbitai in a new review comment at the desired location with your query. Examples:
    • @coderabbitai generate unit testing code for this file.
    • @coderabbitai modularize this function.
  • PR comments: Tag @coderabbitai in a new PR comment to ask questions about the PR branch. For the best results, please provide a very specific query, as very limited context is provided in this mode. Examples:
    • @coderabbitai generate interesting stats about this repository and render them as a table.
    • @coderabbitai show all the console.log statements in this repository.
    • @coderabbitai read src/utils.ts and generate unit testing code.
    • @coderabbitai read the files in the src/scheduler package and generate a class diagram using mermaid and a README in the markdown format.
    • @coderabbitai help me debug CodeRabbit configuration file.

Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments.

CodeRabbit Commands (invoked as PR comments)

  • @coderabbitai pause to pause the reviews on a PR.
  • @coderabbitai resume to resume the paused reviews.
  • @coderabbitai review to trigger an incremental review. This is useful when automatic reviews are disabled for the repository.
  • @coderabbitai full review to do a full review from scratch and review all the files again.
  • @coderabbitai summary to regenerate the summary of the PR.
  • @coderabbitai resolve resolve all the CodeRabbit review comments.
  • @coderabbitai configuration to show the current CodeRabbit configuration for the repository.
  • @coderabbitai help to get help.

Additionally, you can add @coderabbitai ignore anywhere in the PR description to prevent this PR from being reviewed.

CodeRabbit Configuration File (.coderabbit.yaml)

  • You can programmatically configure CodeRabbit by adding a .coderabbit.yaml file to the root of your repository.
  • Please see the configuration documentation for more information.
  • If your editor has YAML language server enabled, you can add the path at the top of this file to enable auto-completion and validation: # yaml-language-server: $schema=https://coderabbit.ai/integrations/schema.v2.json

Documentation and Community

  • Visit our Documentation for detailed information on how to use CodeRabbit.
  • Join our Discord Community to get help, request features, and share feedback.
  • Follow us on X/Twitter for updates and announcements.

@mergify mergify bot added the size/L label Aug 21, 2024
Copy link

@coderabbitai coderabbitai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actionable comments posted: 0

Review details

Configuration used: CodeRabbit UI
Review profile: CHILL

Commits

Files that changed from the base of the PR and between 978e06b and 8ccd027.

Files ignored due to path filters (1)
  • go.sum is excluded by !**/*.sum
Files selected for processing (1)
  • go.mod (4 hunks)
Additional comments not posted (22)
go.mod (22)

34-34: LGTM! Minor update for cloud.google.com/go.

The update from cloud.google.com/go v0.115.0 to v0.115.1 is a minor change and is likely safe.


39-39: LGTM! Minor update for cloud.google.com/go/iam.

The update from cloud.google.com/go/iam v1.1.10 to v1.1.12 is a minor change and is likely safe.


40-40: LGTM! Minor update for cloud.google.com/go/longrunning.

The update from cloud.google.com/go/longrunning v0.5.9 to v0.5.12 is a minor change and is likely safe.


69-69: LGTM! Minor update for golang.org/x/crypto.

The update from golang.org/x/crypto v0.25.0 to v0.26.0 is a minor change and is likely safe.


70-70: LGTM! Minor update for golang.org/x/net.

The update from golang.org/x/net v0.27.0 to v0.28.0 is a minor change and is likely safe.


71-71: LGTM! Minor update for golang.org/x/oauth2.

The update from golang.org/x/oauth2 v0.21.0 to v0.22.0 is a minor change and is likely safe.


72-72: LGTM! Minor update for golang.org/x/sync.

The update from golang.org/x/sync v0.7.0 to v0.8.0 is a minor change and is likely safe.


73-73: LGTM! Minor update for golang.org/x/sys.

The update from golang.org/x/sys v0.23.0 to v0.24.0 is a minor change and is likely safe.


74-74: LGTM! Minor update for golang.org/x/text.

The update from golang.org/x/text v0.16.0 to v0.17.0 is a minor change and is likely safe.


75-75: LGTM! Minor update for golang.org/x/time.

The update from golang.org/x/time v0.5.0 to v0.6.0 is a minor change and is likely safe.


79-79: LGTM! Minor update for google.golang.org/grpc.

The update from google.golang.org/grpc v1.64.1 to v1.65.0 is a minor change and is likely safe.


8-8: Verify compatibility with Dialogflow v1.57.0.

Ensure that the update from cloud.google.com/go/dialogflow v1.55.0 to v1.57.0 is compatible with your existing codebase.

Run the following script to check for breaking changes in the Dialogflow library:

Verification successful

No direct usage of cloud.google.com/go/dialogflow found in the codebase.

The update to cloud.google.com/go/dialogflow v1.57.0 does not appear to impact the current codebase as there are no direct references to this package. It might be used indirectly or not at all.

  • Ensure that any indirect usage through other packages remains compatible.
Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for breaking changes in Dialogflow library usage.

# Test: Search for Dialogflow usage. Expect: No deprecated or breaking changes.
rg --type go 'dialogflow' -A 5

Length of output: 54266


64-64: Verify compatibility with OpenTelemetry instrumentation for gRPC.

Ensure that the update from go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.49.0 to v0.52.0 is compatible with your existing observability setup.

Run the following script to check for breaking changes in the OpenTelemetry gRPC instrumentation usage:


13-13: Verify compatibility with Google APIs v0.193.0.

Ensure that the update from google.golang.org/api v0.189.0 to v0.193.0 is compatible with your existing codebase.

Run the following script to check for breaking changes in the Google APIs library usage:


78-78: Verify compatibility with google.golang.org/genproto/googleapis/rpc.

Ensure that the update to google.golang.org/genproto/googleapis/rpc v0.0.0-20240814211410-ddb44dafa142 is compatible with your existing codebase.

Run the following script to check for breaking changes in the genproto/googleapis/rpc library usage:

Verification successful

No direct usage of google.golang.org/genproto/googleapis/rpc found in the codebase.

The dependency google.golang.org/genproto/googleapis/rpc is only referenced indirectly in the go.mod and go.sum files. There are no direct usages found in the codebase or documentation, indicating that the update is unlikely to affect the existing code.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for breaking changes in google.golang.org/genproto/googleapis/rpc usage.

# Test: Search for genproto/googleapis/rpc usage. Expect: No deprecated or breaking changes.
rg --type go 'google.golang.org/genproto/googleapis/rpc' -A 5

Length of output: 61


Script:

#!/bin/bash
# Search for any references to google.golang.org/genproto/googleapis/rpc in the entire repository.
rg 'google.golang.org/genproto/googleapis/rpc' -A 5

# Check if there are any other Go module files that might reference this package.
fd 'go.mod' --exec rg 'google.golang.org/genproto/googleapis/rpc' {}

# Look for any documentation or configuration files that might mention this package.
rg 'google.golang.org/genproto/googleapis/rpc' --type md --type yaml --type json -A 5

Length of output: 1192


77-77: Verify compatibility with google.golang.org/genproto/googleapis/api.

Ensure that the update to google.golang.org/genproto/googleapis/api v0.0.0-20240814211410-ddb44dafa142 is compatible with your existing codebase.

Run the following script to check for breaking changes in the genproto/googleapis/api library usage:

Verification successful

No usage of google.golang.org/genproto/googleapis/api found in the codebase.

The dependency google.golang.org/genproto/googleapis/api is marked as indirect, and no direct or indirect usage was detected in the codebase. It may be a transitive dependency without direct impact on your code.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for breaking changes in google.golang.org/genproto/googleapis/api usage.

# Test: Search for genproto/googleapis/api usage. Expect: No deprecated or breaking changes.
rg --type go 'google.golang.org/genproto/googleapis/api' -A 5

Length of output: 61


Script:

#!/bin/bash
# Description: Check for any indirect usage of google.golang.org/genproto/googleapis/api by searching for imports in the codebase.

# Find all Go files and search for any imports that might indirectly use the genproto/googleapis/api package.
fd --type f --extension go --exec rg 'import' -A 5

Length of output: 15334


67-67: Verify compatibility with OpenTelemetry metric library.

Ensure that the update from go.opentelemetry.io/otel/metric v1.24.0 to v1.28.0 is compatible with your existing observability setup.

Run the following script to check for breaking changes in the OpenTelemetry metric library usage:


65-65: Verify compatibility with OpenTelemetry instrumentation for HTTP.

Ensure that the update from go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.49.0 to v0.53.0 is compatible with your existing observability setup.

Run the following script to check for breaking changes in the OpenTelemetry HTTP instrumentation usage:


36-36: Verify compatibility with cloud.google.com/go/auth v0.9.0.

Ensure that the update from cloud.google.com/go/auth v0.7.2 to v0.9.0 is compatible with your existing authentication mechanisms.

Run the following script to check for breaking changes in the authentication library usage:

Verification successful

No direct usage of cloud.google.com/go/auth found.

The cloud.google.com/go/auth package is not directly imported or used in the codebase, indicating that the update to version v0.9.0 should not affect existing functionality. This package appears to be an indirect dependency, so no compatibility issues are expected.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for breaking changes in cloud.google.com/go/auth usage.

# Test: Search for auth usage. Expect: No deprecated or breaking changes.
rg --type go 'cloud.google.com/go/auth' -A 5

Length of output: 44


Script:

#!/bin/bash
# Description: Search for import statements of cloud.google.com/go/auth to verify its usage.

# Test: Look for import statements of the auth package.
rg --type go 'import.*cloud\.google\.com/go/auth' -A 5

Length of output: 56


68-68: Verify compatibility with OpenTelemetry trace library.

Ensure that the update from go.opentelemetry.io/otel/trace v1.24.0 to v1.28.0 is compatible with your existing observability setup.

Run the following script to check for breaking changes in the OpenTelemetry trace library usage:

Verification successful

No direct usage of OpenTelemetry trace library found.

The go.opentelemetry.io/otel/trace package is not directly used in the codebase, indicating that the update to version v1.28.0 should not impact the existing setup. No compatibility issues were detected.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for breaking changes in OpenTelemetry trace library usage.

# Test: Search for OpenTelemetry trace library usage. Expect: No deprecated or breaking changes.
rg --type go 'go.opentelemetry.io/otel/trace' -A 5

Length of output: 50


Script:

#!/bin/bash
# Search for any imports of the OpenTelemetry trace package in Go files
rg --type go 'import.*go\.opentelemetry\.io/otel/trace' -A 5

# Search for any usage of the OpenTelemetry trace package in Go files
rg --type go 'otel/trace' -A 5

Length of output: 93


76-76: Verify compatibility with google.golang.org/genproto.

Ensure that the update to google.golang.org/genproto v0.0.0-20240814211410-ddb44dafa142 is compatible with your existing codebase.

Run the following script to check for breaking changes in the genproto library usage:

Verification successful

No direct compatibility issues with google.golang.org/genproto found.

The google.golang.org/genproto package is not directly imported in the codebase, and no direct dependencies in go.mod explicitly require it. As it is an indirect dependency, ensure that any libraries depending on it do not introduce breaking changes.

Scripts executed

The following scripts were executed for the analysis:

Script:

#!/bin/bash
# Description: Check for breaking changes in google.golang.org/genproto usage.

# Test: Search for genproto usage. Expect: No deprecated or breaking changes.
rg --type go 'google.golang.org/genproto' -A 5

Length of output: 46


Script:

#!/bin/bash
# Description: Check for direct dependencies that might rely on google.golang.org/genproto.

# Find all Go files and list their imports to see if any direct dependencies use genproto.
fd --type f --extension go --exec gawk '/^import/ {flag=1; next} /)/ {flag=0} flag' {} +

# Check the go.mod file for any direct dependencies that might have been updated recently.
rg 'require ' go.mod -A 1

Length of output: 29396


66-66: Verify compatibility with OpenTelemetry core library.

Ensure that the update from go.opentelemetry.io/otel v1.24.0 to v1.28.0 is compatible with your existing observability setup.

Run the following script to check for breaking changes in the OpenTelemetry core library usage:

@xavidop xavidop changed the base branch from master to develop August 22, 2024 11:13
@xavidop xavidop merged commit 73e0dcf into develop Aug 22, 2024
4 of 8 checks passed
@xavidop xavidop deleted the dependabot/go_modules/cloud.google.com/go/dialogflow-1.57.0 branch August 22, 2024 11:14
@mergify mergify bot removed the size/L label Aug 22, 2024
xavidop added a commit that referenced this pull request Aug 22, 2024
* chore(deps): bump anchore/sbom-action from 0.17.0 to 0.17.2 (#323)

Bumps [anchore/sbom-action](https://github.com/anchore/sbom-action) from 0.17.0 to 0.17.2.
- [Release notes](https://github.com/anchore/sbom-action/releases)
- [Commits](anchore/sbom-action@v0.17.0...v0.17.2)

---
updated-dependencies:
- dependency-name: anchore/sbom-action
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat(deps): bump google.golang.org/api from 0.189.0 to 0.193.0 (#322)

Bumps [google.golang.org/api](https://github.com/googleapis/google-api-go-client) from 0.189.0 to 0.193.0.
- [Release notes](https://github.com/googleapis/google-api-go-client/releases)
- [Changelog](https://github.com/googleapis/google-api-go-client/blob/main/CHANGES.md)
- [Commits](googleapis/google-api-go-client@v0.189.0...v0.193.0)

---
updated-dependencies:
- dependency-name: google.golang.org/api
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* feat(deps): bump cloud.google.com/go/texttospeech from 1.7.11 to 1.8.0 (#321)

Bumps [cloud.google.com/go/texttospeech](https://github.com/googleapis/google-cloud-go) from 1.7.11 to 1.8.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@iot/v1.7.11...dlp/v1.8.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/texttospeech
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xavier Portilla Edo <[email protected]>

* chore(deps): bump sigstore/cosign-installer from 3.5.0 to 3.6.0 (#312)

Bumps [sigstore/cosign-installer](https://github.com/sigstore/cosign-installer) from 3.5.0 to 3.6.0.
- [Release notes](https://github.com/sigstore/cosign-installer/releases)
- [Commits](sigstore/cosign-installer@v3.5.0...v3.6.0)

---
updated-dependencies:
- dependency-name: sigstore/cosign-installer
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xavier Portilla Edo <[email protected]>

* feat(deps): bump cloud.google.com/go/speech from 1.24.0 to 1.25.0 (#320)

Bumps [cloud.google.com/go/speech](https://github.com/googleapis/google-cloud-go) from 1.24.0 to 1.25.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/documentai/CHANGES.md)
- [Commits](googleapis/google-cloud-go@pubsub/v1.24.0...pubsub/v1.25.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/speech
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xavier Portilla Edo <[email protected]>

* feat(deps): bump cloud.google.com/go/dialogflow from 1.55.0 to 1.57.0 (#319)

Bumps [cloud.google.com/go/dialogflow](https://github.com/googleapis/google-cloud-go) from 1.55.0 to 1.57.0.
- [Release notes](https://github.com/googleapis/google-cloud-go/releases)
- [Changelog](https://github.com/googleapis/google-cloud-go/blob/main/CHANGES.md)
- [Commits](googleapis/google-cloud-go@spanner/v1.55.0...spanner/v1.57.0)

---
updated-dependencies:
- dependency-name: cloud.google.com/go/dialogflow
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Xavier Portilla Edo <[email protected]>

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
This was referenced Sep 13, 2024
@coderabbitai coderabbitai bot mentioned this pull request Sep 26, 2024
@coderabbitai coderabbitai bot mentioned this pull request Oct 24, 2024
@coderabbitai coderabbitai bot mentioned this pull request Nov 7, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant