chore: bump go-coldbrew dependencies to latest versions by ankurs · Pull Request #22 · go-coldbrew/cookiecutter-coldbrew

ankurs · 2026-03-26T04:20:12Z

Summary

Bump all go-coldbrew dependencies in cookiecutter template to latest versions
core v0.1.33, errors v0.2.5, log v0.2.7, interceptors v0.1.12, options v0.2.6, tracing v0.1.0

Test plan

Generate a project from template and verify it builds

Summary by CodeRabbit

Chores
- Updated Go module dependencies to newer versions for improved stability, security, and compatibility.

core v0.1.33, errors v0.2.5, log v0.2.7, interceptors v0.1.12, options v0.2.6, tracing v0.1.0, hystrixprometheus v0.1.2. Includes Phase 4 migration (providers/prometheus, SupportPackageIsVersion1 sentinels).

coderabbitai · 2026-03-26T04:20:19Z

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: d3c229c1-d48d-4c4f-a7c1-01aa0d088a84

📥 Commits

Reviewing files that changed from the base of the PR and between 2e0075c and a48f37a.

📒 Files selected for processing (1)

{{cookiecutter.app_name}}/go.mod

📝 Walkthrough

Walkthrough

This PR updates the Go module dependencies by removing several direct requirements and pinning newer versions of core packages including go-coldbrew modules and google.golang.org libraries, while restructuring the indirect dependency graph across tooling, protobuf, and tracing-related packages.

Changes

Cohort / File(s)	Summary
Go Module Dependencies `{{cookiecutter.app_name}}/go.mod`	Removes direct dependencies (boumenot/gocover-cobertura, bufbuild/buf, golangci-lint, mockery, golang.org/x/vuln) and updates go-coldbrew packages to newer pinned versions. Updates google.golang.org packages (genproto, grpc, protobuf) and restructures indirect dependencies including buf.build, connectrpc, OpenTelemetry, and linting tooling. Removes golang.org/x/vuln from tool() block.

Estimated code review effort

🎯 2 (Simple) | ⏱️ ~12 minutes

Possibly related PRs

PR #20: Both PRs modify the project's golangci-lint usage and configuration in go.mod/tools.
PR #19: Both PRs update go.mod dependency versions, bumping many of the same modules (go-coldbrew packages, google.golang.org/*, OpenTelemetry-related modules).

Suggested reviewers

fajran
vestor
kevinjom
svetha-cvl

Poem

🐰 Dependencies dance in versions new,
Go-coldbrew brews a stronger brew,
Tools refined and buffers bright,
Module graph now shining right! ✨

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The title accurately reflects the main change: bumping go-coldbrew dependencies to latest versions, which is the primary objective of the pull request.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch chore/bump-coldbrew-deps

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Copilot

Pull request overview

Updates the cookiecutter Go template to use newer versions of the go-coldbrew framework modules, keeping generated services aligned with the latest upstream releases.

Changes:

Bump github.com/go-coldbrew/{core,errors,log} to newer versions.
Bump indirect go-coldbrew dependencies (interceptors, options, tracing, and hystrixprometheus) to newer versions.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

…w v0.1.33 Regenerated the complete go.mod from a clean go mod tidy run. Bumps buf to v1.66.1, coldbrew core to v0.1.33, and all transitive dependencies to their resolved versions. Removes stale deps (go-grpc-prometheus, NYTimes/gziphandler, etc.). Tested locally: go mod download + go tool buf generate works without 'updates to go.mod needed' error.

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot

Pull request overview

Copilot reviewed 1 out of 1 changed files in this pull request and generated 1 comment.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-03-26T06:37:02Z

+	github.com/go-coldbrew/log v0.2.7
 	github.com/kelseyhightower/envconfig v1.4.0
-	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10
 	github.com/stretchr/testify v1.11.1


main.go imports github.com/grpc-ecosystem/grpc-gateway/v2/runtime, but github.com/grpc-ecosystem/grpc-gateway/v2 is no longer required anywhere in go.mod. This will force go to rewrite go.mod/go.sum during builds (or fail under -mod=readonly) and makes the template’s dependency list incomplete. Add grpc-gateway/v2 back as a direct requirement (or run go mod tidy after ensuring the template still builds) so the module graph matches the code imports.

Suggested change

github.com/stretchr/testify v1.11.1

github.com/stretchr/testify v1.11.1

github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0

chore: bump go-coldbrew dependencies to latest versions

2091cd5

core v0.1.33, errors v0.2.5, log v0.2.7, interceptors v0.1.12, options v0.2.6, tracing v0.1.0, hystrixprometheus v0.1.2. Includes Phase 4 migration (providers/prometheus, SupportPackageIsVersion1 sentinels).

Copilot AI review requested due to automatic review settings March 26, 2026 04:20

Copilot started reviewing on behalf of ankurs March 26, 2026 04:20 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

Comment thread {{cookiecutter.app_name}}/go.mod Outdated

ankurs added 2 commits March 26, 2026 12:27

fix: bump buf to v1.66.1 to fix protovalidate dependency resolution

accd955

ankurs requested a review from Copilot March 26, 2026 06:05

Copilot started reviewing on behalf of ankurs March 26, 2026 06:05 View session

Copilot AI reviewed Mar 26, 2026

View reviewed changes

Comment thread {{cookiecutter.app_name}}/go.mod

ankurs requested a review from Copilot March 26, 2026 06:34

Copilot started reviewing on behalf of ankurs March 26, 2026 06:35 View session

ankurs merged commit 0d1d3c9 into master Mar 26, 2026
13 checks passed

ankurs deleted the chore/bump-coldbrew-deps branch March 26, 2026 06:35

Copilot AI reviewed Mar 26, 2026

View reviewed changes

This was referenced Apr 2, 2026

chore: bump go-coldbrew dependencies to latest releases #24

Closed

chore: bump ColdBrew and dependency versions #26

Merged

chore: bump core to v0.1.45, interceptors to v0.1.20 #29

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump go-coldbrew dependencies to latest versions#22

chore: bump go-coldbrew dependencies to latest versions#22
ankurs merged 3 commits intomasterfrom
chore/bump-coldbrew-deps

ankurs commented Mar 26, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Mar 26, 2026 •

edited

Loading

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Mar 26, 2026

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

	github.com/stretchr/testify v1.11.1
	github.com/stretchr/testify v1.11.1
	github.com/grpc-ecosystem/grpc-gateway/v2 v2.20.0

Conversation

ankurs commented Mar 26, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Mar 26, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Uh oh!

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Mar 26, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ankurs commented Mar 26, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Mar 26, 2026 •

edited

Loading