chore: bump ColdBrew and dependency versions

[ankurs]

Summary

• Bump core v0.1.33 → v0.1.42 (unix socket gateway, ServeMux, pool statusRecorder)
• Bump errors v0.2.5 → v0.2.11 (trace ID validation, SetTraceIDValidator)
• Bump log v0.2.7 → v0.2.9 (slog default, RWMutex+map)
• Bump grpc v1.79.3 → v1.80.0
• Add grpc-gateway v2.28.0 and vtprotobuf as direct deps
• Bump interceptors, options, tracing, OpenTelemetry, genproto indirects

Test plan

• Versions match latest releases across all go-coldbrew packages
• Generate a new service from template and verify go mod tidy && go build ./...

Summary by CodeRabbit

• Chores
  • Updated primary and indirect dependencies to newer, more secure releases.
  • Upgraded the gRPC stack and related runtime libraries for improved stability and compatibility.
  • Updated OpenTelemetry SDKs, exporters, and instrumentation for enhanced tracing and telemetry.
  • Added gRPC gateway and vtprotobuf runtime dependencies to broaden API stack support.
  • Bumped protocol buffer and code-generation plugin versions for generator improvements and bug fixes.

[coderabbitai]

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0a0f0566-358c-4879-830a-6102f1b76727

📥 Commits

Reviewing files that changed from the base of the PR and between 14b042e and 26a40a8.

📒 Files selected for processing (1)

• {{cookiecutter.app_name}}/go.mod

---

📝 Walkthrough

Walkthrough

Updated build and codegen dependency pins: bumped multiple go-coldbrew modules, gRPC/genproto, grpc-gateway, planetscale vtprotobuf, and OpenTelemetry suites; added some go-coldbrew and OTLP/OTEL modules. Only dependency and buf.gen.yaml generator-version changes; no source or exported API modifications.

Changes

Cohort / File(s)	Summary
Go module dependency changes {{cookiecutter.app_name}}/go.mod	Bumped go-coldbrew modules (core v0.1.33→v0.1.43, errors v0.2.5→v0.2.12, log v0.2.7→v0.3.0); added github.com/go-coldbrew/options v0.3.0; upgraded google.golang.org/grpc v1.79.3→v1.80.0 and genproto revisions; added github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0, github.com/planetscale/vtprotobuf pseudo-version; upgraded OpenTelemetry from v1.42.0→v1.43.0 and added OTLP/SDK/bridge/opentracing modules; introduced indirect go-coldbrew interceptors/tracing entries.
Buf generation config {{cookiecutter.app_name}}/buf.gen.yaml	Updated remote generator versions: protocolbuffers/go v1.36.5→v1.36.11, grpc/go v1.5.1→v1.6.1, grpc-ecosystem/gateway v2.26.1→v2.28.0, openapiv2 v2.26.1→v2.28.0, planetscale-vtprotobuf v0.6.0→v0.6.1. Output targets/options unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

• chore: bump ColdBrew and dependency versions #26 — Directly overlaps: same files (go.mod, buf.gen.yaml) and similar dependency bumps (go-coldbrew modules, grpc-gateway, vtprotobuf, OpenTelemetry).
• chore: bump go-coldbrew dependencies to latest versions #22 — Overlapping dependency upgrades for go-coldbrew, gRPC/genproto, and OpenTelemetry.

Suggested reviewers

• fajran
• vestor
• kevinjom
• svetha-cvl
• wdevarshi

Poem

🐰 I nibbled through go.mod by moonlight,
Pinned bright versions, tidy and light,
Gateways hum and tracers gleam,
Buf gen dreams codegen dreams,
A little hop for deps done right.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title 'chore: bump ColdBrew and dependency versions' accurately summarizes the main change—updating multiple dependency versions including go-coldbrew packages, gRPC, and related tools.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

• Create PR with unit tests
• Commit unit tests in branch chore/bump-deps

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[Copilot]

Pull request overview

Updates the generated service template’s Go module dependencies to newer ColdBrew package versions and related ecosystem libraries (gRPC/OpenTelemetry), adding a couple of direct dependencies needed by the template.

Changes:

• Bumped github.com/go-coldbrew/{core,errors,log} and various related indirect dependencies.
• Bumped google.golang.org/grpc and google.golang.org/genproto versions.
• Added github.com/grpc-ecosystem/grpc-gateway/v2 and github.com/planetscale/vtprotobuf as direct dependencies.

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[Copilot]

github.com/grpc-ecosystem/grpc-gateway/v2 is bumped here to v2.28.0, but the Buf codegen plugins in buf.gen.yaml are still pinned to buf.build/grpc-ecosystem/gateway:v2.26.1 (and openapiv2:v2.26.1). This version skew can lead to confusing generated-code/runtime mismatches; consider bumping the Buf plugin versions in the template to the same grpc-gateway release series as the Go module dependency.

[ankurs]

Fixed — bumped all Buf plugins to match go.mod: gateway/openapiv2 to v2.28.0, protocolbuffers/go to v1.36.11, grpc/go to v1.6.1, vtprotobuf to v0.6.1.

[coderabbitai]

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @{{cookiecutter.app_name}}/go.mod:
- Around line 17-19: The go.mod entry github.com/planetscale/vtprotobuf appears
unused; search the repo for *_vtproto.pb.go files and symbols MarshalVT,
UnmarshalVT, SizeVT, or any vtprotobuf codec registration to confirm it's not
required, then remove the require line for github.com/planetscale/vtprotobuf
from go.mod and run go mod tidy to let the tool resolve it transitively (rebuild
and run tests to ensure no breakage). If you do find generated vtprotobuf
artifacts or direct imports, leave the require and document why; otherwise
delete the dependency and tidy the module.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

• Push a commit to this branch (recommended)
• Create a new PR with the fixes

---

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c8b5c6b6-893b-4efe-a8b6-3804f5fd1b3e

📥 Commits

Reviewing files that changed from the base of the PR and between 50d1571 and e6df310.

📒 Files selected for processing (1)

• {{cookiecutter.app_name}}/go.mod