chore: bump ColdBrew and dependency versions by ankurs · Pull Request #26 · go-coldbrew/cookiecutter-coldbrew

ankurs · 2026-04-04T09:50:48Z

Summary

Bump core v0.1.33 → v0.1.42 (unix socket gateway, ServeMux, pool statusRecorder)
Bump errors v0.2.5 → v0.2.11 (trace ID validation, SetTraceIDValidator)
Bump log v0.2.7 → v0.2.9 (slog default, RWMutex+map)
Bump grpc v1.79.3 → v1.80.0
Add grpc-gateway v2.28.0 and vtprotobuf as direct deps
Bump interceptors, options, tracing, OpenTelemetry, genproto indirects

Test plan

Versions match latest releases across all go-coldbrew packages
Generate a new service from template and verify go mod tidy && go build ./...

Summary by CodeRabbit

Chores
- Updated primary and indirect dependencies to newer, more secure releases.
- Upgraded the gRPC stack and related runtime libraries for improved stability and compatibility.
- Updated OpenTelemetry SDKs, exporters, and instrumentation for enhanced tracing and telemetry.
- Added gRPC gateway and vtprotobuf runtime dependencies to broaden API stack support.
- Bumped protocol buffer and code-generation plugin versions for generator improvements and bug fixes.

Direct deps: - core v0.1.33 → v0.1.42 (unix socket gateway, ServeMux, pool statusRecorder) - errors v0.2.5 → v0.2.11 (trace ID validation, SetTraceIDValidator) - log v0.2.7 → v0.2.9 (slog default, RWMutex+map) - grpc v1.79.3 → v1.80.0 - grpc-gateway v2.28.0 (new direct dep) - vtprotobuf v0.6.1 (new direct dep) - genproto/googleapis/api updated Indirect deps: - interceptors v0.1.17, options v0.2.7, tracing v0.2.1 - OpenTelemetry v1.42.0 → v1.43.0 (all otel packages) - Added otelgrpc, otel bridge/exporters/sdk as indirect

coderabbitai · 2026-04-04T09:51:06Z

Caution

Review failed

The pull request is closed.

ℹ️ Recent review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: 0a0f0566-358c-4879-830a-6102f1b76727

📥 Commits

Reviewing files that changed from the base of the PR and between 14b042e and 26a40a8.

📒 Files selected for processing (1)

{{cookiecutter.app_name}}/go.mod

📝 Walkthrough

Walkthrough

Updated build and codegen dependency pins: bumped multiple go-coldbrew modules, gRPC/genproto, grpc-gateway, planetscale vtprotobuf, and OpenTelemetry suites; added some go-coldbrew and OTLP/OTEL modules. Only dependency and buf.gen.yaml generator-version changes; no source or exported API modifications.

Changes

Cohort / File(s)	Summary
Go module dependency changes `{{cookiecutter.app_name}}/go.mod`	Bumped go-coldbrew modules (core v0.1.33→v0.1.43, errors v0.2.5→v0.2.12, log v0.2.7→v0.3.0); added `github.com/go-coldbrew/options v0.3.0`; upgraded `google.golang.org/grpc` v1.79.3→v1.80.0 and genproto revisions; added `github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0`, `github.com/planetscale/vtprotobuf` pseudo-version; upgraded OpenTelemetry from v1.42.0→v1.43.0 and added OTLP/SDK/bridge/opentracing modules; introduced indirect go-coldbrew interceptors/tracing entries.
Buf generation config `{{cookiecutter.app_name}}/buf.gen.yaml`	Updated remote generator versions: `protocolbuffers/go` v1.36.5→v1.36.11, `grpc/go` v1.5.1→v1.6.1, `grpc-ecosystem/gateway` v2.26.1→v2.28.0, `openapiv2` v2.26.1→v2.28.0, `planetscale-vtprotobuf` v0.6.0→v0.6.1. Output targets/options unchanged.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

chore: bump ColdBrew and dependency versions #26 — Directly overlaps: same files (go.mod, buf.gen.yaml) and similar dependency bumps (go-coldbrew modules, grpc-gateway, vtprotobuf, OpenTelemetry).
chore: bump go-coldbrew dependencies to latest versions #22 — Overlapping dependency upgrades for go-coldbrew, gRPC/genproto, and OpenTelemetry.

Suggested reviewers

fajran
vestor
kevinjom
svetha-cvl
wdevarshi

Poem

🐰 I nibbled through go.mod by moonlight,
Pinned bright versions, tidy and light,
Gateways hum and tracers gleam,
Buf gen dreams codegen dreams,
A little hop for deps done right.

🚥 Pre-merge checks | ✅ 3

✅ Passed checks (3 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title 'chore: bump ColdBrew and dependency versions' accurately summarizes the main change—updating multiple dependency versions including go-coldbrew packages, gRPC, and related tools.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

_{✏️ Tip: You can configure your own custom pre-merge checks in the settings.}

✨ Finishing Touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Commit unit tests in branch chore/bump-deps

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Copilot

Pull request overview

Updates the generated service template’s Go module dependencies to newer ColdBrew package versions and related ecosystem libraries (gRPC/OpenTelemetry), adding a couple of direct dependencies needed by the template.

Changes:

Bumped github.com/go-coldbrew/{core,errors,log} and various related indirect dependencies.
Bumped google.golang.org/grpc and google.golang.org/genproto versions.
Added github.com/grpc-ecosystem/grpc-gateway/v2 and github.com/planetscale/vtprotobuf as direct dependencies.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-04-04T09:52:56Z

+	github.com/grpc-ecosystem/grpc-gateway/v2 v2.28.0
 	github.com/kelseyhightower/envconfig v1.4.0
+	github.com/planetscale/vtprotobuf v0.6.1-0.20240319094008-0393e58bdf10


github.com/grpc-ecosystem/grpc-gateway/v2 is bumped here to v2.28.0, but the Buf codegen plugins in buf.gen.yaml are still pinned to buf.build/grpc-ecosystem/gateway:v2.26.1 (and openapiv2:v2.26.1). This version skew can lead to confusing generated-code/runtime mismatches; consider bumping the Buf plugin versions in the template to the same grpc-gateway release series as the Go module dependency.

Fixed — bumped all Buf plugins to match go.mod: gateway/openapiv2 to v2.28.0, protocolbuffers/go to v1.36.11, grpc/go to v1.6.1, vtprotobuf to v0.6.1.

coderabbitai

Actionable comments posted: 1

🤖 Prompt for all review comments with AI agents

Verify each finding against the current code and only fix it if needed.

Inline comments:
In @{{cookiecutter.app_name}}/go.mod:
- Around line 17-19: The go.mod entry github.com/planetscale/vtprotobuf appears
unused; search the repo for *_vtproto.pb.go files and symbols MarshalVT,
UnmarshalVT, SizeVT, or any vtprotobuf codec registration to confirm it's not
required, then remove the require line for github.com/planetscale/vtprotobuf
from go.mod and run go mod tidy to let the tool resolve it transitively (rebuild
and run tests to ensure no breakage). If you do find generated vtprotobuf
artifacts or direct imports, leave the require and document why; otherwise
delete the dependency and tidy the module.

🪄 Autofix (Beta)

Fix all unresolved CodeRabbit comments on this PR:

Push a commit to this branch (recommended)
Create a new PR with the fixes

ℹ️ Review info

⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro

Run ID: c8b5c6b6-893b-4efe-a8b6-3804f5fd1b3e

📥 Commits

Reviewing files that changed from the base of the PR and between 50d1571 and e6df310.

📒 Files selected for processing (1)

{{cookiecutter.app_name}}/go.mod

- protocolbuffers/go: v1.36.5 → v1.36.11 (matches protobuf v1.36.11) - grpc/go: v1.5.1 → v1.6.1 (latest protoc-gen-go-grpc) - grpc-ecosystem/gateway: v2.26.1 → v2.28.0 (matches grpc-gateway/v2) - grpc-ecosystem/openapiv2: v2.26.1 → v2.28.0 (matches grpc-gateway/v2) - planetscale-vtprotobuf: v0.6.0 → v0.6.1 (matches go.mod) Avoids generated-code/runtime version skew.

Pick up unified RequestContext for reduced per-request context allocations.

All ColdBrew packages now include unified RequestContext support.

Copilot AI review requested due to automatic review settings April 4, 2026 09:50

Copilot started reviewing on behalf of ankurs April 4, 2026 09:51 View session

Copilot AI reviewed Apr 4, 2026

View reviewed changes

coderabbitai Bot reviewed Apr 4, 2026

View reviewed changes

Comment thread {{cookiecutter.app_name}}/go.mod

ankurs added 3 commits April 4, 2026 19:22

chore: bump log to v0.3.0 and add options v0.3.0

321d332

Pick up unified RequestContext for reduced per-request context allocations.

chore: bump core to v0.1.43 and errors to v0.2.12

26a40a8

All ColdBrew packages now include unified RequestContext support.

ankurs merged commit fe9e21c into main Apr 4, 2026
5 of 7 checks passed

ankurs deleted the chore/bump-deps branch April 4, 2026 13:02

This was referenced Apr 6, 2026

chore: bump core to v0.1.45, interceptors to v0.1.20 #29

Merged

feat: JWT and API key auth interceptor examples #32

Merged

feat: switch template logging to native slog.LogAttrs #34

Merged

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

chore: bump ColdBrew and dependency versions#26

chore: bump ColdBrew and dependency versions#26
ankurs merged 4 commits intomainfrom
chore/bump-deps

ankurs commented Apr 4, 2026 •

edited by coderabbitai Bot

Loading

Uh oh!

coderabbitai Bot commented Apr 4, 2026 •

edited

Loading

Review failed

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

Copilot AI left a comment

Uh oh!

Copilot AI Apr 4, 2026

Uh oh!

ankurs Apr 4, 2026

Uh oh!

coderabbitai Bot left a comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

Conversation

ankurs commented Apr 4, 2026 • edited by coderabbitai Bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Summary

Test plan

Summary by CodeRabbit

Uh oh!

coderabbitai Bot commented Apr 4, 2026 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Review failed

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Apr 4, 2026

Choose a reason for hiding this comment

Uh oh!

ankurs Apr 4, 2026

Choose a reason for hiding this comment

Uh oh!

coderabbitai Bot left a comment

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants

ankurs commented Apr 4, 2026 •

edited by coderabbitai Bot

Loading

coderabbitai Bot commented Apr 4, 2026 •

edited

Loading