chore(deps): update all module dependencies #45

Merged

rcsheets merged 1 commit from chore/update-deps into main

2026-07-22 05:18:18 +00:00

rcsheets commented

2026-07-22 05:15:16 +00:00

Owner

Dependency-only release prep: go get -u ./... && go mod tidy.

Key movements:

golang.org/x/sys v0.38.0 -> v0.47.0 (requirement was >= v0.44.0)
prometheus/client_golang v1.19.1 -> v1.24.0 (+ client_model, common, procfs; adds munnerz/goautoneg, drops kr/text and clipperhouse/stringish from the graph)
protobuf v1.33.0 -> v1.36.11, x/text v0.14.0 -> v0.40.0, and routine minor/patch motion in the charmbracelet transitive deps

Direct deps already at latest (cobra, jsonschema, yaml.v3, bubbletea/bubbles/lipgloss) are unchanged.

Verified: go build / vet / test ./... / gofmt clean, plus make cuda and go test -tags cuda -count=1 ./internal/backend/cuda/ ./internal/model/mistral/ on the Blackwell box.

Dependency-only release prep: `go get -u ./... && go mod tidy`. Key movements: - **golang.org/x/sys v0.38.0 -> v0.47.0** (requirement was >= v0.44.0) - prometheus/client_golang v1.19.1 -> v1.24.0 (+ client_model, common, procfs; adds `munnerz/goautoneg`, drops `kr/text` and `clipperhouse/stringish` from the graph) - protobuf v1.33.0 -> v1.36.11, x/text v0.14.0 -> v0.40.0, and routine minor/patch motion in the charmbracelet transitive deps Direct deps already at latest (cobra, jsonschema, yaml.v3, bubbletea/bubbles/lipgloss) are unchanged. Verified: `go build` / `vet` / `test ./...` / `gofmt` clean, plus `make cuda` and `go test -tags cuda -count=1 ./internal/backend/cuda/ ./internal/model/mistral/` on the Blackwell box.

rcsheets added 1 commit

2026-07-22 05:15:17 +00:00

chore(deps): update all module dependencies

ci / test_and_build (pull_request) Successful in 1m3s

Details

20b444f6ab

go get -u ./... && go mod tidy. Notably golang.org/x/sys v0.38.0 ->
v0.47.0 (past the required v0.44.0) and prometheus/client_golang
v1.19.1 -> v1.24.0 (which adds goautoneg and drops kr/text and
clipperhouse/stringish from the module graph); everything else is
routine minor/patch motion. Direct deps already at their latest
(cobra, jsonschema, yaml.v3, and the charmbracelet stack) are
unchanged.

Validated with the full gate: build, vet, tests, gofmt, plus make
cuda and the CUDA-tagged backend/model tests (-count=1) on the
Blackwell box.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

pr-reviewer-bot commented

2026-07-22 05:15:17 +00:00

Collaborator

Automated review by pr-reviewer v0.36.0 | Safety Check | Claude Sonnet 5 | tracking id r-6051e5-706564
This is an AI-generated review and may contain mistakes.

Status: ✅ Completed

⚠️ The primary review (Mistral Small) failed. The review below is from Claude Sonnet 5, which reviewed the same diff.

✅ Verdict: LGTM — Routine, verified dependency bump with no source changes; the go.sum entropy flag is a false positive since go.sum entries are always base64 hash data.

This is a routine dependency bump (go.mod/go.sum only), matching the PR description exactly: version bumps for prometheus client libs, x/sys, x/text, protobuf, and charmbracelet transitive deps, with corresponding additions/removals of transitive packages (goautoneg added, kr/text and clipperhouse/stringish dropped). No source code changes. The "high entropy" flag on go.sum is expected/benign — go.sum lines are base64-encoded hashes, which always look like high-entropy data; this is normal and not a sign of accidentally committed secrets or binaries. PR author states build/vet/test/gofmt all clean, plus CUDA-specific tests passed. No signs of malicious or accidental content.

*Automated review by [pr-reviewer](https://git.brooktrails.org/brooktrails/pr-reviewer) v0.36.0 | Safety Check | Claude Sonnet 5 | tracking id `r-6051e5-706564`* *This is an AI-generated review and may contain mistakes.* **Status:** ✅ Completed --- > ⚠️ The primary review (**Mistral Small**) failed. The review below is from **Claude Sonnet 5**, which reviewed the same diff. **✅ Verdict: LGTM** — Routine, verified dependency bump with no source changes; the go.sum entropy flag is a false positive since go.sum entries are always base64 hash data. This is a routine dependency bump (go.mod/go.sum only), matching the PR description exactly: version bumps for prometheus client libs, x/sys, x/text, protobuf, and charmbracelet transitive deps, with corresponding additions/removals of transitive packages (goautoneg added, kr/text and clipperhouse/stringish dropped). No source code changes. The "high entropy" flag on go.sum is expected/benign — go.sum lines are base64-encoded hashes, which always look like high-entropy data; this is normal and not a sign of accidentally committed secrets or binaries. PR author states build/vet/test/gofmt all clean, plus CUDA-specific tests passed. No signs of malicious or accidental content.

rcsheets merged commit 4a9bfbee44 into main

2026-07-22 05:18:18 +00:00

rcsheets deleted branch chore/update-deps

2026-07-22 05:18:18 +00:00

rcsheets referenced this pull request from a commit

2026-07-22 05:18:18 +00:00

Merge pull request 'chore(deps): update all module dependencies' (#45) from chore/update-deps into main