Skip to content

fix(deps): bump module protocol/go to v0.30.0 throughout - #3459

Merged
jakedoublev merged 1 commit into
mainfrom
fix/bump-protocol
May 11, 2026
Merged

fix(deps): bump module protocol/go to v0.30.0 throughout#3459
jakedoublev merged 1 commit into
mainfrom
fix/bump-protocol

Conversation

@jakedoublev

@jakedoublev jakedoublev commented May 11, 2026

Copy link
Copy Markdown
Contributor

Proposed Changes

  • pulls in new 0.30.0 protocol/go module to all downstream monorepo consumer modules

Summary by CodeRabbit

  • Chores
    • Platform dependency updates across multiple components: synchronized core protocol dependencies in examples, command-line tools, SDK, service modules, and BDD test suites to consistent versions for improved platform stability, compatibility, and interoperability.
    • Security library updates: upgraded cryptographic and network transport libraries to latest patch versions in integration tests for enhanced protection.

Review Change Stack

@gemini-code-assist

Copy link
Copy Markdown
Contributor

Summary of Changes

Hello, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed!

This pull request standardizes the protocol/go module version to v0.30.0 across the monorepo to ensure consistency and compatibility for all downstream services and tools. The changes primarily involve updating the go.mod and go.sum files to align with the latest protocol definitions.

Highlights

  • Dependency Update: Updated the github.com/opentdf/platform/protocol/go module to version v0.30.0 across all consumer modules in the monorepo.
  • Dependency Maintenance: Synchronized go.sum files to reflect the new module version and updated auxiliary dependencies in the integration test suite.
New Features

🧠 You can now enable Memory (public preview) to help Gemini Code Assist learn from your team's feedback. This makes future code reviews more consistent and personalized to your project's style. Click here to enable Memory in your admin console.

Using Gemini Code Assist

The full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips.

Invoking Gemini

You can request assistance from Gemini at any point by creating a comment using either /gemini <command> or @gemini-code-assist <command>. Below is a summary of the supported commands on the current page.

Feature Command Description
Code Review /gemini review Performs a code review for the current pull request in its current state.
Pull Request Summary /gemini summary Provides a summary of the current pull request in its current state.
Comment @gemini-code-assist Responds in comments when explicitly tagged, both in pull request comments and review comments.
Help /gemini help Displays a list of available commands.

Customization

To customize the Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a .gemini/ folder in the base of the repository. Detailed instructions can be found here.

Limitations & Feedback

Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counterproductive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for GitHub and other Google products, sign up here.


The modules align in a row, / To version thirty we now go. / The protocols sync, / With nary a blink, / And let the new features now flow.

Footnotes

  1. Review the Privacy Notices, Generative AI Prohibited Use Policy, Terms of Service, and learn how to configure Gemini Code Assist in GitHub here. Gemini can make mistakes, so double check it and use code with caution.

@coderabbitai

coderabbitai Bot commented May 11, 2026

Copy link
Copy Markdown

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: Repository UI

Review profile: ASSERTIVE

Plan: Pro

Run ID: 3b82279e-1e48-4648-a9be-57397ec2228a

📥 Commits

Reviewing files that changed from the base of the PR and between 69a6210 and 2faf0ae.

⛔ Files ignored due to path filters (6)
  • examples/go.sum is excluded by !**/*.sum
  • otdfctl/go.sum is excluded by !**/*.sum
  • sdk/go.sum is excluded by !**/*.sum
  • service/go.sum is excluded by !**/*.sum
  • test/integration/go.sum is excluded by !**/*.sum
  • tests-bdd/go.sum is excluded by !**/*.sum
📒 Files selected for processing (6)
  • examples/go.mod
  • otdfctl/go.mod
  • sdk/go.mod
  • service/go.mod
  • test/integration/go.mod
  • tests-bdd/go.mod

📝 Walkthrough

Walkthrough

This PR synchronizes the github.com/opentdf/platform/protocol/go dependency to v0.30.0 across five Go modules (examples, otdfctl, sdk, service, tests-bdd) with varying prior versions. Additionally, indirect dependencies for cryptographic and networking libraries are updated in the test/integration module.

Changes

Protocol Dependency Synchronization

Layer / File(s) Summary
Protocol/go v0.30.0 Synchronization
examples/go.mod, otdfctl/go.mod, sdk/go.mod, service/go.mod, tests-bdd/go.mod
github.com/opentdf/platform/protocol/go upgraded to v0.30.0 across all main modules from prior versions (v0.27.0–v0.29.0).
Transitive Dependency Updates
test/integration/go.mod
golang.org/x/crypto bumped from v0.48.0 to v0.49.0 and golang.org/x/net bumped from v0.51.0 to v0.52.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~3 minutes

Possibly related PRs

Suggested labels

size/m

Suggested reviewers

  • elizabethhealy
  • c-r33d
  • ryanulit

Poem

A rabbit hops through version trees,
Syncing protocols with ease,
From crypto bytes to network streams,
Dependencies aligned like springtime dreams! 🐰✨

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Description Check ✅ Passed Check skipped - CodeRabbit’s high-level summary is enabled.
Title check ✅ Passed The title accurately describes the main change: bumping the protocol/go dependency to v0.30.0 across multiple modules.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.

✏️ Tip: You can configure your own custom pre-merge checks in the settings.

✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch fix/bump-protocol

Tip

💬 Introducing Slack Agent: The best way for teams to turn conversations into code.

Slack Agent is built on CodeRabbit's deep understanding of your code, so your team can collaborate across the entire SDLC without losing context.

  • Generate code and open pull requests
  • Plan features and break down work
  • Investigate incidents and troubleshoot customer tickets together
  • Automate recurring tasks and respond to alerts with triggers
  • Summarize progress and report instantly

Built for teams:

  • Shared memory across your entire org—no repeating context
  • Per-thread sandboxes to safely plan and execute work
  • Governance built-in—scoped access, auditability, and budget controls

One agent for your entire SDLC. Right inside Slack.

👉 Get started


Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands and usage tips.

@github-actions github-actions Bot added size/s comp:sdk A software development kit, including library, for client applications and inter-service communicati comp:examples and removed size/s labels May 11, 2026
@jakedoublev
jakedoublev marked this pull request as ready for review May 11, 2026 18:11
@jakedoublev
jakedoublev requested review from a team as code owners May 11, 2026 18:11

@gemini-code-assist gemini-code-assist Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Code Review

This pull request updates the 'github.com/opentdf/platform/protocol/go' dependency to version v0.30.0 across several modules, including examples, otdfctl, sdk, service, and tests-bdd. It also increments the versions of 'golang.org/x/crypto', 'golang.org/x/net', and 'golang.org/x/term' within the integration test suite. I have no feedback to provide as there were no review comments to assess.

@github-actions

Copy link
Copy Markdown
Contributor
Benchmark results, click to expand

Benchmark authorization.GetDecisions Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 175.147667ms

Benchmark authorization.v2.GetMultiResourceDecision Results:

Metric Value
Approved Decision Requests 1000
Denied Decision Requests 0
Total Time 93.477482ms

Benchmark Statistics

Name № Requests Avg Duration Min Duration Max Duration

Bulk Benchmark Results

Metric Value
Total Decrypts 100
Successful Decrypts 100
Failed Decrypts 0
Total Time 445.155883ms
Throughput 224.64 requests/second

TDF3 Benchmark Results:

Metric Value
Total Requests 5000
Successful Requests 5000
Failed Requests 0
Concurrent Requests 50
Total Time 42.714344867s
Average Latency 425.000655ms
Throughput 117.06 requests/second

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Govulncheck found vulnerabilities ⚠️

The following modules have known vulnerabilities:

  • examples
  • otdfctl
  • sdk
  • service
  • lib/fixtures
  • tests-bdd

See the workflow run for details.

@jakedoublev
jakedoublev enabled auto-merge May 11, 2026 18:27
@jakedoublev
jakedoublev added this pull request to the merge queue May 11, 2026
Merged via the queue into main with commit 8eaa502 May 11, 2026
43 checks passed
@jakedoublev
jakedoublev deleted the fix/bump-protocol branch May 11, 2026 19:50
github-merge-queue Bot pushed a commit that referenced this pull request May 12, 2026
🤖 I have created a release *beep* *boop*
---


##
[0.20.0](sdk/v0.19.0...sdk/v0.20.0)
(2026-05-11)


### Bug Fixes

* **deps:** bump module protocol/go to v0.30.0 throughout
([#3459](#3459))
([8eaa502](8eaa502))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: opentdf-automation[bot] <149537512+opentdf-automation[bot]@users.noreply.github.com>
JBCongdon pushed a commit to JBCongdon/platform that referenced this pull request May 24, 2026
🤖 I have created a release *beep* *boop*
---


##
[0.32.0](opentdf/platform@otdfctl/v0.31.0...otdfctl/v0.32.0)
(2026-05-19)


### Features

* **cli:** Add better unit testing.
([opentdf#3378](opentdf#3378))
([3ad33dc](opentdf@3ad33dc))
* **cli:** Add interactive review for prune plans
([opentdf#3421](opentdf#3421))
([c11680b](opentdf@c11680b))
* **cli:** Add prune confirmation.
([opentdf#3469](opentdf#3469))
([c6d47ec](opentdf@c6d47ec))
* **cli:** Add prune planner.
([opentdf#3411](opentdf#3411))
([3e294e6](opentdf@3e294e6))
* **cli:** Add prune summary information
([opentdf#3456](opentdf#3456))
([c900c53](opentdf@c900c53))
* **cli:** add sensitive flag annotation to DocFlag
([opentdf#3457](opentdf#3457))
([98f48d2](opentdf@98f48d2))
* **cli:** Confirm and execute pruning of legacy objects
([opentdf#3458](opentdf#3458))
([24c09dd](opentdf@24c09dd))
* **cli:** Print report on failure
([opentdf#3365](opentdf#3365))
([05a4473](opentdf@05a4473))
* **cli:** Sort parameters.
([opentdf#3478](opentdf#3478))
([73ad878](opentdf@73ad878))
* **policy:** Add FQN to RegisteredResourceValues
([opentdf#3446](opentdf#3446))
([3199583](opentdf@3199583))
* **policy:** Add resource mapping group FQNs
([opentdf#3447](opentdf#3447))
([6a0b3c6](opentdf@6a0b3c6))


### Bug Fixes

* **cli:** Prune was not classifying multi-namespaced RRs properly.
([opentdf#3488](opentdf#3488))
([eae8645](opentdf@eae8645))
* **cli:** support json profile output
([opentdf#3448](opentdf#3448))
([61f194c](opentdf@61f194c))
* **deps:** bump github.com/opentdf/platform/lib/identifier from 0.3.0
to 0.4.0 in /otdfctl
([opentdf#3367](opentdf#3367))
([aa23179](opentdf@aa23179))
* **deps:** bump github.com/opentdf/platform/protocol/go from 0.27.0 to
0.28.0 in /otdfctl
([opentdf#3419](opentdf#3419))
([c80374f](opentdf@c80374f))
* **deps:** bump github.com/opentdf/platform/sdk from 0.16.0 to 0.17.0
in /otdfctl ([opentdf#3397](opentdf#3397))
([bb9fcd6](opentdf@bb9fcd6))
* **deps:** bump go.opentelemetry.io/otel from 1.40.0 to 1.41.0 in
/otdfctl ([opentdf#3400](opentdf#3400))
([5631c37](opentdf@5631c37))
* **deps:** bump module protocol/go to v0.30.0 throughout
([opentdf#3459](opentdf#3459))
([8eaa502](opentdf@8eaa502))

---
This PR was generated with [Release
Please](https://github.com/googleapis/release-please). See
[documentation](https://github.com/googleapis/release-please#release-please).

Co-authored-by: opentdf-automation[bot] <149537512+opentdf-automation[bot]@users.noreply.github.com>
Co-authored-by: Chris Reed <87077975+c-r33d@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

comp:examples comp:sdk A software development kit, including library, for client applications and inter-service communicati

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants