Skip to content

[deps] Dependency update: sdk-go - #454

Open
replicated-software-factory[bot] wants to merge 4 commits into
mainfrom
deps/replicated-sdk-updates-go
Open

[deps] Dependency update: sdk-go#454
replicated-software-factory[bot] wants to merge 4 commits into
mainfrom
deps/replicated-sdk-updates-go

Conversation

@replicated-software-factory

@replicated-software-factory replicated-software-factory Bot commented Aug 18, 2026

Copy link
Copy Markdown

This PR was generated by the vandoor-update-sdk-go Factory workflow.

What does this PR do?

Updates Go dependencies for the replicated-sdk project and adapts the Dagger pipeline to the upgraded 1Password SDK API.

Changes

Root module (go.mod):

  • github.com/replicatedhq/kotskinds: v0.0.0-20260513164854-d3c205b56eb4v0.1.0
  • github.com/stretchr/testify: v1.11.1v1.12.1
  • go.yaml.in/yaml/v3: v3.0.4v3.0.5
  • helm.sh/helm/v3: v3.21.3v3.21.4
  • k8s.io/api: v0.36.3v0.36.4
  • k8s.io/apimachinery: v0.36.3v0.36.4
  • k8s.io/cli-runtime: v0.36.3v0.36.4
  • k8s.io/client-go: v0.36.3v0.36.4
  • Patch updates to github.com/cloudflare/circl, github.com/fxamacker/cbor/v2, github.com/go-openapi/swag and its subpackages, github.com/mattn/go-runewidth, github.com/santhosh-tekuri/jsonschema/v6, and google.golang.org/protobuf
  • Indirect OpenTelemetry dependencies removed by go mod tidy.

Dagger module (dagger/go.mod):

  • github.com/1password/onepassword-sdk-go: v0.1.7v0.4.1
  • Patch updates to github.com/ianlancetaylor/demangle and google.golang.org/protobuf
  • Indirect OpenTelemetry / Dagger otel dependencies removed by go mod tidy because the newer 1Password SDK no longer requires them.

Dagger code (dagger/secret.go):

  • Adapted to the 1Password SDK v0.4.1 API (client.Items().List, client.Secrets().Resolve, etc.).

Does this PR introduce a user-facing change?

NONE

Comment thread dagger/go.mod

go 1.26.1

require (

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

does this need a rebase maybe?

not sure why these lines would be deleted for this dep update.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

No rebase needed — the branch is already on top of main (merge-base is the current origin/main).

The deleted lines in dagger/go.mod are indirect dependencies that go mod tidy removed after upgrading github.com/1password/onepassword-sdk-go from v0.1.7 to v0.4.1. The newer SDK no longer pulls in the OpenTelemetry/Dagger otel stack, so github.com/dagger/otel-go, go.opentelemetry.io/otel/sdk, and their transitive deps are no longer required. We also added a follow-up commit (da8e995) to adapt dagger/secret.go to the 1Password SDK v0.4.1 API.

Verification:

  • make build / go build ./... passes for the root module.
  • make test passes for unit tests (pact tests need the pact CLI, which is present in CI).
  • CI test, build, and scan checks are green; the remaining e2e jobs are in progress.

Copy link
Copy Markdown
Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Hi @kriscoleman — thanks for the review. This is resolved:

  • The branch was already on top of main (no rebase needed).
  • The deleted lines in dagger/go.mod were indirect OpenTelemetry/Dagger otel dependencies that go mod tidy removed after upgrading github.com/1password/onepassword-sdk-go from v0.1.7 to v0.4.1. The newer SDK no longer pulls them in.
  • dagger/secret.go was adapted to the v0.4.1 API in commit da8e995 (client.Items().List, client.Secrets().Resolve, etc.).
  • CI is now passing on the latest commit (test and build green; scan and e2e jobs are still running).

Could you take another look and dismiss/request changes as needed?

ElasticClaw Factory added 3 commits August 20, 2026 04:03
This PR was generated by the vandoor-update-sdk-go Factory workflow.
- Replace Items.ListAll iterator with Items().List slice\n- Replace Secrets.Resolve with Secrets().Resolve\n- Remove deprecated ErrorIteratorDone reference
@replicated-software-factory
replicated-software-factory Bot force-pushed the deps/replicated-sdk-updates-go branch from 113085e to f4d65b7 Compare August 20, 2026 04:08
- Root module: bump k8s.io/* to v0.36.4, plus patch updates to cloudflare/circl, fxamacker/cbor/v2, go-openapi/swag, mattn/go-runewidth, santhosh-tekuri/jsonschema/v6, and google.golang.org/protobuf
- Dagger module: bump ianlancetaylor/demangle and google.golang.org/protobuf
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant