Skip to content

ci(dependabot): update every Go module in the repository - #4640

Open
kyleconroy wants to merge 3 commits into
mainfrom
claude/confident-albattani-i1kayo
Open

kyleconroy wants to merge 3 commits into
mainfrom
claude/confident-albattani-i1kayo

Conversation

@kyleconroy

@kyleconroy kyleconroy commented Oct 13, 2026 •

Copy link
Copy Markdown
Collaborator

The examples module replaces github.com/sqlc-dev/sqlc with ../, so it has to carry the same versions as the root module. Dependabot only watched the root go.mod, which is why #4635 had to be replaced by #4639 with a manual go mod tidy in examples/.

This switches the gomod entry from directory: "/" to directories listing all four Go modules:

  • /
  • /examples
  • /internal/goldeneye — never watched before; it has drifted (still on grpc 1.83.2, for example)
  • /internal/endtoend/testdata — only exists so CI can go build the committed golden code

With the existing production and development groups, Dependabot opens one pull request per group spanning all of them, so a bump lands in every go.mod together.

The endtoend testdata module's go directive goes from 1.25.0 to 1.26.0, matching the other three. Current releases of several of its dependencies (google.golang.org/api, genproto, x/tools) require Go 1.26, so without this Dependabot could not update them.

Testing

  • go build ./... in internal/endtoend/testdata passes after the go directive change.
  • In a scratch copy, go get -u ./... && go mod tidy && go build ./... in internal/endtoend/testdata also passes. That moved pgx v4 from a 2020 commit to 4.18.3, lib/pq 1.9.0 → 1.12.3, go-sql-driver/mysql 1.7.0 → 1.10.1, pgx v5 → 5.11.0, and more, so the golden code builds against current drivers.
  • go test ./internal/endtoend -run TestReplay/base passes.

Updates that fall outside the groups (security updates, for example) may still arrive as one pull request per directory.

🤖 Generated with Claude Code

https://claude.ai/code/session_01LyueKDc8vSZZALuaDh9RSq

The examples module replaces github.com/sqlc-dev/sqlc with ../, so a
bump that lands only in the root go.mod leaves it out of step (see #4635
and #4639). Listing both directories lets each grouped update cover both
modules in one pull request.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LyueKDc8vSZZALuaDh9RSq
@kyleconroy kyleconroy changed the title ci(dependabot): update the examples module alongside the root module ci(dependabot): update the examples and goldeneye modules alongside the root module Oct 13, 2026
The module only exists so CI can compile the committed golden code, and
that code builds against the latest version of every driver it imports.
Raise its go directive to 1.26.0, matching the other modules, since the
current releases of several of its dependencies require it.

Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LyueKDc8vSZZALuaDh9RSq
@kyleconroy kyleconroy changed the title ci(dependabot): update the examples and goldeneye modules alongside the root module ci(dependabot): update every Go module in the repository Oct 13, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants