Skip to content

Consolidate dependency updates from Dependabot PRs#120

Merged
haroonc merged 1 commit intomainfrom
chore/consolidated-deps
Apr 1, 2026
Merged

Consolidate dependency updates from Dependabot PRs#120
haroonc merged 1 commit intomainfrom
chore/consolidated-deps

Conversation

@alex-doudou
Copy link
Copy Markdown
Contributor

  • Tests pass
  • Appropriate changes to documentation are included in the PR

This PR consolidates the following dependency updates into a single manual PR:

@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go version to 1.25.0 and performs a dependency cleanup in cicd-mcp-server, removing unused packages and updating others like protobuf and jsonparser. Feedback indicates that the Go version update is likely premature as Go 1.25 is not yet a stable release, and it is recommended to move the cicd/lib/bm25 dependency to the main requirement block to follow standard Go conventions.

@alex-doudou alex-doudou force-pushed the chore/consolidated-deps branch 2 times, most recently from 6e938fd to 6bbd469 Compare March 31, 2026 21:41
@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go version from 1.24.8 to 1.25.0 and refreshes several Go module dependencies, including google.golang.org/protobuf, github.com/segmentio/encoding, golang.org/x/mod, golang.org/x/oauth2, golang.org/x/sync, and github.com/buger/jsonparser. It also removes various unused indirect dependencies and introduces cicd/lib/bm25 as a new direct dependency. The review suggests improving the go.mod file's readability by relocating the cicd/lib/bm25 dependency to the primary direct dependency block.

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates project-wide dependencies and bumps the Go version to 1.25.0 in the cicd-mcp-server module. The updates include major libraries such as gRPC, protobuf, and go-git, while removing several unused cloud and telemetry packages. Feedback was provided to improve the organization of the local-kb-index-builder/go.mod file by grouping the direct dependency cicd/lib/bm25 with other direct dependencies to maintain consistency with the rest of the project.

@alex-doudou alex-doudou force-pushed the chore/consolidated-deps branch from 6bbd469 to 63fbee5 Compare March 31, 2026 22:00
@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go version to 1.25.5 for the cicd-mcp-server module and performs extensive dependency updates across the project, including the addition of the bm25 library to multiple modules. Feedback indicates that the Go version should be updated consistently across all modules in the monorepo to avoid potential tooling issues.

@alex-doudou alex-doudou force-pushed the chore/consolidated-deps branch from 63fbee5 to 9b69c98 Compare March 31, 2026 22:29
@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request upgrades the Go version to 1.25.5 across the repository's modules and updates several core dependencies, including the Model Context Protocol SDK, gRPC, and Protobuf. Feedback focuses on maintaining dependency version consistency across the monorepo, specifically noting mismatches for jsonparser, filepath-securejoin, and several golang.org/x packages between the cicd-mcp-server, testclient, and local-kb-index-builder modules.

@alex-doudou alex-doudou force-pushed the chore/consolidated-deps branch from 9b69c98 to 6c0d7ed Compare April 1, 2026 15:25
@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request upgrades the Go version to 1.25.5 across multiple modules and updates various dependencies, including gRPC, Protobuf, and the MCP SDK. Feedback was provided regarding a redundant indirect dependency entry for github.com/philippgille/chromem-go in the cicd-mcp-server/go.mod file, which is already listed as a direct dependency.

@alex-doudou alex-doudou force-pushed the chore/consolidated-deps branch from 6c0d7ed to fa4831d Compare April 1, 2026 15:34
@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go version to 1.25.5 across the project and upgrades several core dependencies, including the MCP Go SDK, gRPC, and Protobuf. It also adds a local library dependency, cicd/lib/bm25, to the server and index builder modules. A high-severity concern was raised regarding the removal of the cloud.google.com/go/storage dependency in the server module, as this could lead to build failures if the package is still in use.

@haroonc
Copy link
Copy Markdown
Contributor

haroonc commented Apr 1, 2026

/gcbrun

@haroonc
Copy link
Copy Markdown
Contributor

haroonc commented Apr 1, 2026

/gcbrun(fa4831d)

Consolidates updates from #109, #112, #114, #118, #119.
- Unified Go version to 1.25.5 and aligned shared dependencies across monorepo.
- Intentional Removal: cloud.google.com/go/storage is removed as GCS operations now use gcloud CLI.
- Resolved structural inconsistencies and duplicate entries (chromem-go, blocks).
- Verified build and unit tests pass across all modules.
@alex-doudou alex-doudou force-pushed the chore/consolidated-deps branch from fa4831d to 81b79d2 Compare April 1, 2026 16:15
@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gcbrun(81b79d2)

@alex-doudou
Copy link
Copy Markdown
Contributor Author

/gemini review

Copy link
Copy Markdown
Contributor

@gemini-code-assist gemini-code-assist bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the Go toolchain version from 1.24 to 1.25 across the repository, including the Cloud Build configuration and multiple go.mod files. It also bumps several dependencies, such as the Model Context Protocol Go SDK and gRPC. Feedback was provided suggesting a revert of the Go version in the go.mod file to the stable 1.24.8 release, as 1.25 is not yet available.

@haroonc haroonc merged commit a66e8aa into main Apr 1, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants