Conversation
ℹ️ Artifact update noticeFile name: go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: snippets/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
File name: spannerlib/go.modIn order to perform the update(s) described in the table above, Renovate ran the
Details:
|
trusted-contributions-gcf
bot
added
the
kokoro:force-run
Summary of ChangesHello @renovate-bot, I'm Gemini Code Assist1! I'm currently reviewing this pull request and will post my feedback shortly. In the meantime, here's a summary to help you and other reviewers quickly get up to speed! This pull request performs a comprehensive update of both Go and Java dependencies used within the project. The updates bring the Go toolchain, various Google API client libraries, and several Java components to their latest stable versions. This ensures the project benefits from the most recent bug fixes, performance enhancements, and new features provided by these upstream libraries, maintaining compatibility and security. Highlights
Changelog
Activity
Using Gemini Code AssistThe full guide for Gemini Code Assist can be found on our documentation page, here are some quick tips. Invoking Gemini You can request assistance from Gemini at any point by creating a comment using either
Customization To customize Gemini Code Assist for GitHub experience, repository maintainers can create a configuration file and/or provide a custom code review style guide (such as PEP-8 for Python) by creating and adding files to a Limitations & Feedback Gemini Code Assist may make mistakes. Please leave feedback on any instances where its feedback is incorrect or counter productive. You can react with 👍 and 👎 on @gemini-code-assist comments. If you're interested in giving your feedback about your experience with Gemini Code Assist for Github and other Google products, sign up here. You can also get AI-powered code generation, chat, as well as code reviews directly in the IDE at no cost with the Gemini Code Assist IDE Extension. Footnotes
|
![gemini-code-assist[bot]](https://avatars.githubusercontent.com/in/956858?s=60&v=4){kind=small}
There was a problem hiding this comment.
Code Review
This pull request updates a number of Go and Java dependencies. The Java dependency updates appear to be safe. However, the Go module files (go.mod) show misaligned versions for google.golang.org/genproto and its sub-packages. Using different versions of related packages can lead to build or runtime issues. I've added comments to the affected go.mod files with suggestions on how to resolve these inconsistencies to improve the stability and maintainability of the project.
| google.golang.org/api v0.263.0 | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20260128011058-8636f8732409 | ||
| google.golang.org/api v0.265.0 | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 |
There was a problem hiding this comment.
The versions of google.golang.org/genproto/... dependencies seem to be misaligned. google.golang.org/genproto/googleapis/rpc is at version ...-546029d..., while google.golang.org/genproto and google.golang.org/genproto/googleapis/api are at an older version ...-8636f87... (see lines 61-62).
This can lead to subtle issues. It's best to use a consistent version for all google.golang.org/genproto packages. Running go mod tidy should resolve this by aligning the versions of these related packages. If not, you might need to add an explicit require for google.golang.org/genproto with the latest version and then run go mod tidy.
| google.golang.org/genproto v0.0.0-20260128011058-8636f8732409 // indirect | ||
| google.golang.org/genproto/googleapis/api v0.0.0-20260128011058-8636f8732409 // indirect | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 // indirect |
There was a problem hiding this comment.
The versions of google.golang.org/genproto/... dependencies seem to be misaligned. google.golang.org/genproto and google.golang.org/genproto/googleapis/api are at version ...-8636f87..., while google.golang.org/genproto/googleapis/rpc is at ...-546029d....
This can lead to subtle issues. It's best to use a consistent version for all google.golang.org/genproto packages. You can achieve this by adding an explicit require for google.golang.org/genproto with the latest version and then running go mod tidy.
For example, add this to your require block:
google.golang.org/genproto v0.0.0-20260203192932-546029d2fa20Then run go mod tidy to align all related transitive dependencies.
| google.golang.org/api v0.265.0 | ||
| google.golang.org/genproto/googleapis/api v0.0.0-20260203192932-546029d2fa20 | ||
| google.golang.org/genproto/googleapis/rpc v0.0.0-20260203192932-546029d2fa20 |
There was a problem hiding this comment.
There are a couple of issues with the dependencies in this go.mod file:
-
Misaligned
genprotoversions:google.golang.org/genproto/googleapis/apiand.../rpcare at version...-546029d..., but the basegoogle.golang.org/genprotois at an older version...-8636f87...(see line 64). This can lead to subtle build or runtime issues. It's best to align allgoogle.golang.org/genprotopackages to the same version. -
Transitive dependencies listed as direct: Dependencies like
google.golang.org/api,.../api, and.../rpcare listed as direct dependencies. If they are not directly imported by code in this module, they should be indirect. Since there are no Go files in this directory, they are likely transitive dependencies.
To fix this, you can run go get google.golang.org/genproto@v0.0.0-20260203192932-546029d2fa20 to update the base package, and then run go mod tidy to clean up the direct and indirect dependencies.
1 participant
This PR contains the following updates:
v2.16.0→v2.17.01.25.6→1.25.7v0.263.0→v0.265.08636f87→546029d8636f87→546029d2.74.0→2.74.12.45.0→2.47.03.56.0→3.56.1Release Notes
googleapis/gax-go (github.com/googleapis/gax-go/v2)
v2.17.0: v2 2.17.0Compare Source
Features
golang/go (go)
v1.25.7googleapis/google-api-go-client (google.golang.org/api)
v0.265.0Compare Source
Features
v0.264.0Compare Source
Features
google/error-prone (com.google.errorprone:error_prone_annotations)
v2.47.0: Error Prone 2.47.0Compare Source
New checks:
InterruptedInCatchBlock: Detect accidental calls toThread.interrupted()inside ofcatch(InterruptedException e)blocks.RefactorSwitch: Refactorings to simplify arrow switchesUnnamedVariable: Rename unused variables to_Closed issues: #1811, #4168, #5459, #5460
Full changelog: google/error-prone@v2.46.0...v2.47.0
v2.46.0: Error Prone 2.46.0Compare Source
Changes:
-XDaddTypeAnnotationsToSymbol=trueis now required for Error Prone invocations on JDK 21, to enable the javac fix for JDK-8225377: type annotations are not visible to javac plugins across compilation boundaries. See #5426 for details.valueattribute from@IncompatibleModifiersand@RequiredModifiers(#2122)EndPosTable,DiagnosticPosition) (5440bb4,06c2905,f3915ec)New checks:
DuplicateAssertion: detect duplicated assertion lines where the argument toassertThatis pureIfChainToSwitch: suggest converting chains of if-statements into arrow switchesScannerUseDelimiter: discourageScanner.useDelimiter("\\A")AddNullMarkedToClass: refactoring to add@NullMarkedannotation to top level classesConfiguration
📅 Schedule: Branch creation - Between 12:00 AM and 03:59 AM ( * 0-3 * * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.
♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.
This PR was generated by Mend Renovate. View the repository job log.