Skip to content

Update dependencies to latest versions#273

Merged
umputun merged 2 commits into
masterfrom
update-dependencies-2026-04
Apr 20, 2026
Merged

Update dependencies to latest versions#273
umputun merged 2 commits into
masterfrom
update-dependencies-2026-04

Conversation

@paskal
Copy link
Copy Markdown
Collaborator

@paskal paskal commented Apr 11, 2026

Summary

  • Update all direct and indirect dependencies to latest versions across v1, v2, and _example modules
  • Fix v1 test compatibility: switch custom_server_test.go jwt import from v3 to v5 to match updated go-oauth2/oauth2/v4 requirement
  • Keep Go 1.24.0 in v2 and _example by pinning golang.org/x packages to latest 1.24-compatible versions

Notable dependency updates (v1 — Go 1.25.0):

  • golang.org/x/oauth2 v0.33.0 → v0.36.0
  • golang.org/x/image v0.38.0 → v0.39.0
  • golang.org/x/crypto v0.45.0 → v0.50.0
  • github.com/go-pkgz/rest v1.20.4 → v1.21.0
  • github.com/go-pkgz/repeater/v2 v2.0.1 → v2.2.0
  • github.com/go-oauth2/oauth2/v4 v4.5.2 → v4.5.4
  • github.com/klauspost/compress v1.18.2 → v1.18.5

Notable dependency updates (v2, _example — Go 1.24.0):

  • golang.org/x/crypto v0.45.0 → v0.48.0
  • golang.org/x/image v0.33.0 → v0.36.0
  • golang.org/x/oauth2 v0.33.0 → v0.35.0
  • golang.org/x/sync v0.18.0 → v0.19.0
  • golang.org/x/sys v0.38.0 → v0.41.0
  • golang.org/x/text v0.31.0 → v0.34.0
  • github.com/go-pkgz/rest v1.20.4 → v1.21.0
  • github.com/go-pkgz/repeater/v2 v2.0.1 → v2.2.0
  • github.com/golang-jwt/jwt/v5 v5.3.0 → v5.3.1
  • github.com/klauspost/compress v1.18.2 → v1.18.5

@paskal paskal requested a review from umputun as a code owner April 11, 2026 09:39
@coveralls
Copy link
Copy Markdown

coveralls commented Apr 11, 2026

Coverage Report for CI Build 24693514175

Coverage remained the same at 84.247%

Details

  • Coverage remained the same as the base build.
  • Patch coverage: No coverable lines changed in this PR.
  • No coverage regressions found.

Uncovered Changes

No uncovered changes found.

Coverage Regressions

No coverage regressions found.


Coverage Stats

Coverage Status
Relevant Lines: 3212
Covered Lines: 2706
Line Coverage: 84.25%
Coverage Strength: 7.27 hits per line

💛 - Coveralls

@paskal paskal force-pushed the update-dependencies-2026-04 branch from af7213a to 9111966 Compare April 17, 2026 01:39
Copy link
Copy Markdown
Member

@umputun umputun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dep bumps look fine, but one scope thing:

ci-v2.yml drops the goveralls submission step (7 lines), and it's not in the PR description. That step was added intentionally in #256 a few months back to publish v2 coverage. If the intent is to stop double-submitting (since v1 already covers the same paths), could you mention it in the PR body? Otherwise I'd prefer to keep it and land only the dep updates here.

rest LGTM — the jwt v3→v5 switch in custom_server_test.go is the right call given the go-oauth2/oauth2/v4 update.

@paskal paskal force-pushed the update-dependencies-2026-04 branch from c980b31 to 83a754f Compare April 20, 2026 22:25
@paskal paskal requested a review from umputun April 20, 2026 22:25
@paskal
Copy link
Copy Markdown
Collaborator Author

paskal commented Apr 20, 2026

Fixed, please take another look.

Copy link
Copy Markdown
Member

@umputun umputun left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks for reverting the ci-v2.yml change, LGTM now.

@umputun umputun merged commit c00a6e9 into master Apr 20, 2026
9 checks passed
@umputun umputun deleted the update-dependencies-2026-04 branch April 20, 2026 23:28
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants