Skip to content

deps: upgrade all dependencies to latest#333

Merged
jongio merged 1 commit into
mainfrom
deps/upgrade-all
Jul 19, 2026
Merged

deps: upgrade all dependencies to latest#333
jongio merged 1 commit into
mainfrom
deps/upgrade-all

Conversation

@jongio

@jongio jongio commented Jul 19, 2026

Copy link
Copy Markdown
Owner

Routine dependency refresh across all ecosystems.

Go modules

Package From To
github.com/github/copilot-sdk/go v1.0.6 v1.0.7
modernc.org/sqlite v1.53.0 v1.54.0

Indirect bumps: charmbracelet/ultraviolet, charmbracelet/x/exp/slice, dlclark/regexp2/v2, mattn/go-isatty, modernc.org/libc. Adds indirect ebitengine/purego v0.10.1 (new transitive dep of modernc.org/libc).

GitHub Actions

Action From To
actions/setup-go v6.5.0 v7.0.0
actions/setup-node v6.4.0 v7.0.0

Both v7 bumps are ESM migrations plus dependency updates, with no workflow-facing config changes. cosign-installer stays pinned with cosign-release v2.6.4 (v3 breaks detached .sig/.pem signing).

npm (web/)

No eligible upgrades. astro 7.1.x is within the 7-day release-age cooldown; all other packages already at latest.

Held back

astro 7.1.1 (published 2 days ago) held by the 7-day cooldown.

Validation

go build, go vet, golangci-lint (0 issues), go test ./..., govulncheck (no vulnerabilities), gofumpt, deadcode, and astro build all pass.

Co-authored-by: Copilot App 223556219+Copilot@users.noreply.github.com

Go modules:
- github.com/github/copilot-sdk/go v1.0.6 -> v1.0.7
- modernc.org/sqlite v1.53.0 -> v1.54.0
- indirect: charmbracelet/ultraviolet, charmbracelet/x/exp/slice,
  dlclark/regexp2/v2, mattn/go-isatty, modernc.org/libc; adds indirect
  ebitengine/purego v0.10.1 (new dep of modernc.org/libc)

GitHub Actions:
- actions/setup-go v6.5.0 -> v7.0.0 (ci.yml x2, release.yml)
- actions/setup-node v6.4.0 -> v7.0.0 (pages.yml)

npm (web/): no eligible upgrades. astro 7.1.x is within the 7-day
release-age cooldown; all other packages already at latest.

Validation: go build, go vet, golangci-lint (0 issues), go test ./...,
govulncheck (no vulnerabilities), gofumpt (clean), deadcode (OK), and
astro build all pass.

Co-authored-by: Copilot App <223556219+Copilot@users.noreply.github.com>
Copilot-Session: a11db554-391f-41d3-9be1-7fd3bc7739c3
@jongio jongio self-assigned this Jul 19, 2026
@jongio jongio added the deps Dependency updates label Jul 19, 2026
@jongio
jongio merged commit 187db72 into main Jul 19, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

deps Dependency updates

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant