Conversation
Contributor
|
Caution Review failedThe pull request is closed. ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Pro Run ID: ⛔ Files ignored due to path filters (12)
📒 Files selected for processing (20)
📝 WalkthroughSummary by CodeRabbit
WalkthroughGo toolchain version bumped from 1.26.1 to 1.26.2 across GitHub Actions workflows, go.mod files, and Docker images. Transitive dependencies including AWS SDK eventstream, OpenTelemetry (v1.43.0), gRPC (v1.80.0), and genproto packages updated systematically. Docker runtime includes explicit zlib version pin. Changes
Estimated code review effort🎯 2 (Simple) | ⏱️ ~10 minutes Possibly related PRs
Suggested reviewers
Poem
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
|
Contributor
Author
Merge activity
|
Contributor
🧪 Test Suite AvailableThis PR can be tested by a repository admin. |
Contributor
Confidence Score: 5/5Safe to merge — purely mechanical version bumps with no logic changes. All changes are routine dependency and toolchain upgrades consistently applied across every module and workflow. The zlib pin is a net security improvement. No logic, API, or behavioral changes were introduced. No files require special attention.
|
| Filename | Overview |
|---|---|
| .github/workflows/release-pipeline.yml | Go version bumped from 1.26.1 to 1.26.2 across all 10 job steps; no other changes. |
| transports/Dockerfile | Builder image updated to golang:1.26.2-alpine3.23 with a new digest; zlib pinned to 1.3.2-r0 in the runtime stage as a security fix. |
| transports/Dockerfile.local | Builder tag updated to golang:1.26.2-alpine3.23; zlib pinned to 1.3.2-r0; no digest pins (existing intentional behavior for local dev). |
| core/go.mod | Go directive bumped to 1.26.2; eventstream updated to v1.7.8 (direct dep). |
| plugins/otel/go.mod | OTel bumped to v1.43.0; new otel/sdk and otel/sdk/metric packages added; gRPC and genproto updated. |
| plugins/litellmcompat/go.mod | Go bumped to 1.26.2; eventstream, OTel (with new sdk packages), gRPC, and genproto all updated. |
| transports/go.mod | Go bumped to 1.26.2; gonum updated from v0.16.0 to v0.17.0; OTel, gRPC, genproto, and eventstream updated. |
| .github/workflows/e2e-tests.yml | Go version bumped to 1.26.2; no other changes. |
| .github/workflows/pr-tests.yml | Go version bumped to 1.26.2; no other changes. |
| .github/workflows/snyk.yml | Go version bumped to 1.26.2 in both snyk-open-source and snyk-code jobs. |
Reviews (1): Last reviewed commit: "package updates" | Re-trigger Greptile
Vaibhav701161
pushed a commit
to Vaibhav701161/bifrost
that referenced
this pull request
Apr 11, 2026
## Summary Upgrade Go version from 1.26.1 to 1.26.2 across all modules and CI workflows, and update various dependencies to their latest versions. ## Changes - Updated Go version from 1.26.1 to 1.26.2 in all go.mod files and GitHub Actions workflows - Upgraded AWS SDK eventstream dependency from v1.7.6 to v1.7.8 - Updated OpenTelemetry dependencies from v1.40.0 to v1.43.0 - Upgraded gRPC from v1.79.3 to v1.80.0 - Updated Google genproto dependencies to latest versions - Added zlib security fix (v1.3.2-r0) to Docker images - Updated gonum from v0.16.0 to v0.17.0 ## Type of change - [x] Chore/CI ## Affected areas - [x] Core (Go) - [x] Transports (HTTP) - [x] Providers/Integrations - [x] Plugins ## How to test Verify the Go version upgrade and dependency updates work correctly: ```sh # Verify Go version go version # Test all modules go test ./... # Verify builds succeed make build # Check dependency versions go list -m all | grep -E "(aws-sdk-go|otel|grpc|genproto)" ``` ## Breaking changes - [ ] Yes - [x] No ## Security considerations This update includes a security fix for zlib in the Docker images (pinned to v1.3.2-r0) and updates various dependencies to their latest secure versions. ## Checklist - [x] I read `docs/contributing/README.md` and followed the guidelines - [x] I added/updated tests where appropriate - [x] I updated documentation where needed - [x] I verified builds succeed (Go and UI) - [x] I verified the CI pipeline passes locally if applicable
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
2 participants
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Summary
Upgrade Go version from 1.26.1 to 1.26.2 across all modules and CI workflows, and update various dependencies to their latest versions.
Changes
Type of change
Affected areas
How to test
Verify the Go version upgrade and dependency updates work correctly:
Breaking changes
Security considerations
This update includes a security fix for zlib in the Docker images (pinned to v1.3.2-r0) and updates various dependencies to their latest secure versions.
Checklist
docs/contributing/README.mdand followed the guidelines