Skip to content

fix(deps): update github.com/grafana/dskit digest to 6674f38#399

Open
renovate-sh-app[bot] wants to merge 1 commit intomainfrom
renovate/github.com-grafana-dskit-digest
Open

fix(deps): update github.com/grafana/dskit digest to 6674f38#399
renovate-sh-app[bot] wants to merge 1 commit intomainfrom
renovate/github.com-grafana-dskit-digest

Conversation

@renovate-sh-app
Copy link
Contributor

@renovate-sh-app renovate-sh-app bot commented Oct 3, 2025

This PR contains the following updates:

Package Type Update Change
github.com/grafana/dskit require digest 8ff9c656674f38

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

Need help?

You can ask for more help in the following Slack channel: #proj-renovate-self-hosted. In that channel you can also find ADR and FAQ docs in the Resources section.

@renovate-sh-app renovate-sh-app bot requested a review from a team as a code owner October 3, 2025 15:03
@renovate-sh-app
Copy link
Contributor Author

renovate-sh-app bot commented Oct 3, 2025

ℹ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 48 additional dependencies were updated

Details:

Package Change
github.com/golang/snappy v0.0.4 -> v1.0.0
github.com/prometheus/client_golang v1.22.0 -> v1.23.2
github.com/prometheus/common v0.64.0 -> v0.67.4
github.com/stretchr/testify v1.10.0 -> v1.11.1
go.opentelemetry.io/otel v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.38.0
golang.org/x/net v0.44.0 -> v0.47.0
golang.org/x/oauth2 v0.31.0 -> v0.32.0
golang.org/x/sync v0.17.0 -> v0.19.0
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
github.com/gogo/status v1.1.0 -> v1.1.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.27.2
github.com/hashicorp/go-sockaddr v1.0.6 -> v1.0.7
github.com/hashicorp/memberlist v0.5.2 -> v0.5.3
github.com/prometheus/exporter-toolkit v0.11.0 -> v0.15.0
github.com/prometheus/procfs v0.16.1 -> v0.17.0
github.com/uber/jaeger-client-go v2.28.0+incompatible -> v2.30.0+incompatible
github.com/uber/jaeger-lib v2.2.0+incompatible -> v2.4.1+incompatible
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 -> v0.63.0
go.opentelemetry.io/contrib/exporters/autoexport v0.61.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.63.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.63.0
go.opentelemetry.io/contrib/propagators/jaeger v1.35.0 -> v1.38.0
go.opentelemetry.io/contrib/samplers/jaegerremote v0.30.0 -> v0.32.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.12.2 -> v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.12.2 -> v0.14.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/prometheus v0.58.0 -> v0.60.0
go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.12.2 -> v0.14.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.36.0 -> v1.38.0
go.opentelemetry.io/otel/log v0.12.2 -> v0.14.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.38.0
go.opentelemetry.io/otel/sdk/log v0.12.2 -> v0.14.0
go.opentelemetry.io/otel/sdk/metric v1.37.0 -> v1.38.0
go.opentelemetry.io/proto/otlp v1.6.0 -> v1.7.1
golang.org/x/crypto v0.42.0 -> v0.45.0
golang.org/x/mod v0.27.0 -> v0.30.0
golang.org/x/sys v0.36.0 -> v0.38.0
golang.org/x/text v0.29.0 -> v0.31.0
google.golang.org/grpc v1.75.1 -> v1.77.0

@github-project-automation github-project-automation bot moved this to In review in Alerting Oct 3, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch 2 times, most recently from f510603 to 49bec80 Compare October 7, 2025 18:03
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to d6a51ec fix(deps): update github.com/grafana/dskit digest to 2b7008c Oct 9, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch 2 times, most recently from b108006 to ebdf171 Compare October 9, 2025 21:02
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 2b7008c fix(deps): update github.com/grafana/dskit digest to 965b207 Oct 10, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from ebdf171 to 52b848e Compare October 10, 2025 21:01
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 965b207 fix(deps): update github.com/grafana/dskit digest to e2f07d6 Oct 16, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 52b848e to bd7074e Compare October 16, 2025 00:03
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to e2f07d6 fix(deps): update github.com/grafana/dskit digest to 61d6b41 Oct 22, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from bd7074e to 7aa128c Compare October 22, 2025 00:23
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 61d6b41 fix(deps): update github.com/grafana/dskit digest to c9f6cd7 Oct 23, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 7aa128c to 833ea87 Compare October 23, 2025 12:18
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to c9f6cd7 fix(deps): update github.com/grafana/dskit digest to 6aed377 Oct 23, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 833ea87 to b468f09 Compare October 23, 2025 15:19
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 6aed377 fix(deps): update github.com/grafana/dskit digest to 6cdb4f7 Oct 24, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from b468f09 to 7f37e45 Compare October 24, 2025 00:17
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 6cdb4f7 fix(deps): update github.com/grafana/dskit digest to 3f3e8b6 Oct 24, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 7f37e45 to 3c2e1d8 Compare October 24, 2025 09:22
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 3f3e8b6 fix(deps): update github.com/grafana/dskit digest to f699a5a Oct 24, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 3c2e1d8 to 01edab4 Compare October 24, 2025 12:22
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to f699a5a fix(deps): update github.com/grafana/dskit digest to 10fce42 Oct 24, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch 2 times, most recently from 6691b6f to ae0dba1 Compare October 24, 2025 18:18
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 10fce42 fix(deps): update github.com/grafana/dskit digest to e39fe4d Oct 28, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from ae0dba1 to 0155427 Compare October 28, 2025 15:30
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch 2 times, most recently from 7f229cc to 0454f3d Compare November 21, 2025 18:23
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 77a2234 fix(deps): update github.com/grafana/dskit digest to 4ba32ef Nov 21, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 0454f3d to ecb9da2 Compare November 24, 2025 15:30
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 4ba32ef fix(deps): update github.com/grafana/dskit digest to 6a1c430 Nov 24, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from ecb9da2 to e348a3e Compare November 25, 2025 12:36
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 6a1c430 fix(deps): update github.com/grafana/dskit digest to 1df7b7e Nov 25, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from e348a3e to 6d876c5 Compare November 25, 2025 15:34
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 1df7b7e fix(deps): update github.com/grafana/dskit digest to 1b93cfe Nov 25, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 6d876c5 to 5d65763 Compare November 26, 2025 09:25
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 1b93cfe fix(deps): update github.com/grafana/dskit digest to 5fb4d54 Nov 26, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 5d65763 to 41fcb21 Compare November 26, 2025 12:24
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 5fb4d54 fix(deps): update github.com/grafana/dskit digest to 9344c08 Nov 26, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 41fcb21 to 96cc85b Compare November 26, 2025 15:23
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 9344c08 fix(deps): update github.com/grafana/dskit digest to 191763b Nov 26, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 96cc85b to 1076305 Compare November 26, 2025 18:25
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 191763b fix(deps): update github.com/grafana/dskit digest to 7e071af Nov 26, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 1076305 to 434fca6 Compare November 27, 2025 09:05
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 7e071af fix(deps): update github.com/grafana/dskit digest to 7721010 Nov 27, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 434fca6 to 0acca6f Compare November 27, 2025 12:09
@renovate-sh-app renovate-sh-app bot changed the title fix(deps): update github.com/grafana/dskit digest to 7721010 fix(deps): update github.com/grafana/dskit digest to 67fc3e2 Nov 27, 2025
@renovate-sh-app renovate-sh-app bot force-pushed the renovate/github.com-grafana-dskit-digest branch from 0acca6f to 3bfca54 Compare November 27, 2025 15:07
@renovate-sh-app
Copy link
Contributor Author

renovate-sh-app bot commented Dec 23, 2025

ℹ️ Artifact update notice

File name: go.mod

In order to perform the update(s) described in the table above, Renovate ran the go get command, which resulted in the following additional change(s):

  • 50 additional dependencies were updated
  • The go directive was updated for compatibility reasons

Details:

Package Change
go 1.24.0 -> 1.25.7
github.com/golang/snappy v0.0.4 -> v1.0.0
github.com/prometheus/client_golang v1.22.0 -> v1.23.2
github.com/prometheus/common v0.64.0 -> v0.67.5
github.com/stretchr/testify v1.10.0 -> v1.11.1
go.opentelemetry.io/otel v1.37.0 -> v1.40.0
go.opentelemetry.io/otel/trace v1.37.0 -> v1.40.0
golang.org/x/net v0.44.0 -> v0.51.0
golang.org/x/oauth2 v0.31.0 -> v0.34.0
golang.org/x/sync v0.17.0 -> v0.19.0
github.com/cenkalti/backoff/v5 v5.0.2 -> v5.0.3
github.com/coreos/go-systemd/v22 v22.5.0 -> v22.6.0
github.com/gogo/status v1.1.0 -> v1.1.1
github.com/grpc-ecosystem/grpc-gateway/v2 v2.26.3 -> v2.27.7
github.com/hashicorp/go-sockaddr v1.0.6 -> v1.0.7
github.com/hashicorp/memberlist v0.5.2 -> v0.5.3
github.com/jaegertracing/jaeger-idl v0.5.0 -> v0.6.0
github.com/prometheus/exporter-toolkit v0.11.0 -> v0.15.1
github.com/prometheus/procfs v0.16.1 -> v0.19.2
github.com/uber/jaeger-client-go v2.28.0+incompatible -> v2.30.0+incompatible
github.com/uber/jaeger-lib v2.2.0+incompatible -> v2.4.1+incompatible
go.opentelemetry.io/auto/sdk v1.1.0 -> v1.2.1
go.opentelemetry.io/contrib/bridges/prometheus v0.61.0 -> v0.65.0
go.opentelemetry.io/contrib/exporters/autoexport v0.61.0 -> v0.65.0
go.opentelemetry.io/contrib/instrumentation/net/http/httptrace/otelhttptrace v0.60.0 -> v0.65.0
go.opentelemetry.io/contrib/instrumentation/net/http/otelhttp v0.61.0 -> v0.65.0
go.opentelemetry.io/contrib/propagators/jaeger v1.35.0 -> v1.40.0
go.opentelemetry.io/contrib/samplers/jaegerremote v0.30.0 -> v0.34.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploggrpc v0.12.2 -> v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlplog/otlploghttp v0.12.2 -> v0.16.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetricgrpc v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlpmetric/otlpmetrichttp v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracegrpc v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/otlp/otlptrace/otlptracehttp v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/prometheus v0.58.0 -> v0.62.0
go.opentelemetry.io/otel/exporters/stdout/stdoutlog v0.12.2 -> v0.16.0
go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/exporters/stdout/stdouttrace v1.36.0 -> v1.40.0
go.opentelemetry.io/otel/log v0.12.2 -> v0.16.0
go.opentelemetry.io/otel/metric v1.37.0 -> v1.40.0
go.opentelemetry.io/otel/sdk v1.37.0 -> v1.40.0
go.opentelemetry.io/otel/sdk/log v0.12.2 -> v0.16.0
go.opentelemetry.io/otel/sdk/metric v1.37.0 -> v1.40.0
go.opentelemetry.io/proto/otlp v1.6.0 -> v1.9.0
golang.org/x/crypto v0.42.0 -> v0.48.0
golang.org/x/mod v0.27.0 -> v0.33.0
golang.org/x/sys v0.36.0 -> v0.41.0
golang.org/x/text v0.29.0 -> v0.34.0
golang.org/x/tools v0.36.0 -> v0.42.0
google.golang.org/genproto/googleapis/api v0.0.0-20251111163417-95abcf5c77ba -> v0.0.0-20260128011058-8636f8732409

@cursor
Copy link

cursor bot commented Jan 23, 2026

Bugbot Autofix prepared a fix for the bug found in the latest run.

  • ✅ Fixed: Version mismatch between dependencies and replace directives
    • Updated replace directives from v0.0.0-20251124214823-79d6a2a48846 to v0.0.0-20251202230838-ff82c1b0f217 to match the indirect dependency versions, verified with successful go mod tidy and go build.

Create PR

Preview (bd3522d)
diff --git a/go.mod b/go.mod
--- a/go.mod
+++ b/go.mod
@@ -172,8 +172,8 @@ replace gopkg.in/ldap.v3 v3.1.3 => github.com/go-ldap/ldap/v3 v3.1.3
 // still reference the old monolithic module, causing build failures.
 // These replace directives force all dependencies to use compatible versions from
 // the same snapshot. Remove once upstream dependencies (dskit -> gogo/status) are updated.
-replace google.golang.org/genproto => google.golang.org/genproto v0.0.0-20251124214823-79d6a2a48846
+replace google.golang.org/genproto => google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217
 
-replace google.golang.org/genproto/googleapis/rpc => google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846
+replace google.golang.org/genproto/googleapis/rpc => google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217
 
-replace google.golang.org/genproto/googleapis/api => google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846
+replace google.golang.org/genproto/googleapis/api => google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217

diff --git a/go.sum b/go.sum
--- a/go.sum
+++ b/go.sum
@@ -2328,9 +2328,9 @@ google.golang.org/appengine v1.6.5/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCID
 google.golang.org/appengine v1.6.6/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
 google.golang.org/appengine v1.6.7/go.mod h1:8WjMMxjGQR8xUklV/ARdw2HLXBOI7O7uCIDZVag1xfc=
 google.golang.org/appengine v1.6.8/go.mod h1:1jJ3jBArFh5pcgW8gCtRJnepW8FzD1V44FJffLiz/Ds=
-google.golang.org/genproto v0.0.0-20251124214823-79d6a2a48846/go.mod h1:PP0g88Dz3C7hRAfbQCQggeWAXjuqGsNPLE4s7jh0RGU=
-google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846 h1:ZdyUkS9po3H7G0tuh955QVyyotWvOD4W0aEapeGeUYk=
-google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846/go.mod h1:Fk4kyraUvqD7i5H6S43sj2W98fbZa75lpZz/eUyhfO0=
+google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:yJ2HH4EHEDTd3JiLmhds6NkJ17ITVYOdV3m3VKOnws0=
+google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217 h1:fCvbg86sFXwdrl5LgVcTEvNC+2txB5mgROGmRL5mrls=
+google.golang.org/genproto/googleapis/api v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:+rXWjjaukWZun3mLfjmVnQi18E1AsFbDN9QdJ5YXLto=
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20230530153820-e85fd2cbaebc/go.mod h1:ylj+BE99M198VPbBh6A8d9n3w8fChvyLK3wwBOjXBFA=
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20231012201019-e917dd12ba7a/go.mod h1:+34luvCflYKiKylNwGJfn9cFBbcL/WrkciMmDmsTQ/A=
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20231030173426-d783a09b4405/go.mod h1:GRUCuLdzVqZte8+Dl/D4N25yLzcGqqWaYkeVOwulFqw=
@@ -2374,8 +2374,8 @@ google.golang.org/genproto/googleapis/bytestream v0.0.0-20250715232539-7130f93af
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20250728155136-f173205681a0/go.mod h1:h6yxum/C2qRb4txaZRLDHK8RyS0H/o2oEDeKY4onY/Y=
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20250804133106-a7a43d27e69b/go.mod h1:h6yxum/C2qRb4txaZRLDHK8RyS0H/o2oEDeKY4onY/Y=
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20250908214217-97024824d090/go.mod h1:Zm0W1CckZuSE8rNxJRJ0+pbZP3UOe8WQpyr0KGPtjAQ=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846 h1:Wgl1rcDNThT+Zn47YyCXOXyX/COgMTIdhJ717F0l4xk=
-google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217 h1:gRkg/vSppuSQoDjxyiGfN4Upv/h/DQmIR10ZU8dh4Ww=
+google.golang.org/genproto/googleapis/rpc v0.0.0-20251202230838-ff82c1b0f217/go.mod h1:7i2o+ce6H/6BluujYR+kqX3GKH+dChPTQU19wjRPiGk=
 google.golang.org/grpc v1.12.0/go.mod h1:yo6s7OP7yaDglbqo1J04qKzAhqBH6lvTonzMVmEdcZw=
 google.golang.org/grpc v1.17.0/go.mod h1:6QZJwpn2B+Zp71q/5VxRsJ6NXXVCE5NRUHRo+f3cWCs=
 google.golang.org/grpc v1.19.0/go.mod h1:mqu4LbDTu4XGKhr4mRzUsmM4RtVoemTSY81AxZiDr8c=

diff --git a/go.work.sum b/go.work.sum
--- a/go.work.sum
+++ b/go.work.sum
@@ -533,8 +533,6 @@ github.com/gorilla/mux v1.8.0/go.mod h1:DVbg23sWSpFRCP0SfiEN6jmj59UnW/n46BH5rLB7
 github.com/gorilla/websocket v0.0.0-20170926233335-4201258b820c h1:Lh2aW+HnU2Nbe1gqD9SOJLJxW1jBMmQOktN2acDyJk8=
 github.com/grafana/gomemcache v0.0.0-20250318131618-74242eea118d h1:oXRJlb9UjVsl6LhqBdbyAQ9YFhExwsj4bjh5vwMNRZY=
 github.com/grafana/gomemcache v0.0.0-20250318131618-74242eea118d/go.mod h1:j/s0jkda4UXTemDs7Pgw/vMT06alWc42CHisvYac0qw=
-github.com/grafana/prometheus-alertmanager v0.25.1-0.20260112162805-d29cc9cf7f0f h1:9tRhudagkQO2s61SLFLSziIdCm7XlkfypVKDxpcHokg=
-github.com/grafana/prometheus-alertmanager v0.25.1-0.20260112162805-d29cc9cf7f0f/go.mod h1:AsVdCBeDFN9QbgpJg+8voDAcgsW0RmNvBd70ecMMdC0=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.8 h1:iwOtYXeeVSAeYefJNaxDytgjKtUuKQbJqgAIjlnicKg=
 github.com/grafana/pyroscope-go/godeltaprof v0.1.8/go.mod h1:2+l7K7twW49Ct4wFluZD3tZ6e0SjanjcUUBPVD/UuGU=
 github.com/grpc-ecosystem/go-grpc-middleware v1.0.1-0.20190118093823-f849b5445de4 h1:z53tR0945TRRQO/fLEVPI6SMv7ZflF0TEaTAoU7tOzg=
@@ -722,7 +720,9 @@ go.opencensus.io v0.24.0 h1:y73uSU6J157QMP2kn2r30vwW1A2W2WFwSCGnAVxeaD0=
 go.opentelemetry.io/contrib/detectors/gcp v1.36.0 h1:F7q2tNlCaHY9nMKHR6XH9/qkp8FktLnIcy6jJNyOCQw=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.60.0 h1:x7wzEgXfnzJcHDwStJT+mxOz4etr2EcexjqhBvmoakw=
 go.opentelemetry.io/contrib/instrumentation/google.golang.org/grpc/otelgrpc v0.61.0 h1:q4XOmH/0opmeuJtPsbFNivyl7bCt7yRBbeEm2sC/XtQ=
+go.opentelemetry.io/otel v1.38.0/go.mod h1:zcmtmQ1+YmQM9wrNsTGV/q/uyusom3P8RxwExxkZhjM=
 go.opentelemetry.io/otel/oteltest v0.20.0 h1:HiITxCawalo5vQzdHfKeZurV8x7ljcqAgiWzF6Vaeaw=
+go.opentelemetry.io/otel/trace v1.38.0/go.mod h1:j1P9ivuFsTceSWe1oY+EeW3sc+Pp42sO++GHkg4wwhs=
 go.uber.org/multierr v1.6.0 h1:y6IPFStTAIT5Ytl7/XYmHvzXQ7S3g/IeZW9hyZ5thw4=
 go.uber.org/tools v0.0.0-20190618225709-2cfd321de3ee h1:0mgffUl7nfd+FpvXMVz4IDEaUSmT1ysygQC7qYo7sG4=
 go.uber.org/zap v1.17.0 h1:MTjgFu6ZLKvY6Pvaqk97GlxNBuMpV4Hy/3P6tRGlI2U=
@@ -751,6 +751,7 @@ google.golang.org/appengine v1.6.7 h1:FZR1q0exgwxzPzp/aF+VccGrSfxfPpkBqjIIEq3ru6
 google.golang.org/appengine v1.6.8 h1:IhEN5q69dyKagZPYMSdIjS2HqprW324FRQZJcGqPAsM=
 google.golang.org/genproto v0.0.0-20230410155749-daa745c078e1 h1:KpwkzHKEF7B9Zxg18WzOa7djJ+Ha5DzthMyZYQfEn2A=
 google.golang.org/genproto v0.0.0-20251124214823-79d6a2a48846 h1:dDbsTLIK7EzwUq36kCSAsk0slouq/S0tWHeeGi97cD8=
+google.golang.org/genproto v0.0.0-20251202230838-ff82c1b0f217 h1:GvESR9BIyHUahIb0NcTum6itIWtdoglGX+rnGxm2934=
 google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7 h1:FiusG7LWj+4byqhbvmB+Q93B/mOxJLN2DTozDuZm4EU=
 google.golang.org/genproto/googleapis/api v0.0.0-20250707201910-8d1bb00bc6a7/go.mod h1:kXqgZtrWaf6qS3jZOCnCH7WYfrvFjkC51bM8fz3RsCA=
 google.golang.org/genproto/googleapis/bytestream v0.0.0-20250908214217-97024824d090 h1:68pD8VoWOHPYA7rgl1jkWvXKCCXPeI3A/fzGyfL3+TY=

@cursor

This comment has been minimized.

Copy link

@cursor cursor bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Bugbot Autofix is ON. A Cloud Agent has been kicked off to fix the reported issue.

google.golang.org/genproto/googleapis/rpc v0.0.0-20251111163417-95abcf5c77ba // indirect
google.golang.org/grpc v1.75.1 // indirect
google.golang.org/protobuf v1.36.10 // indirect
go.yaml.in/yaml/v2 v2.4.3 // indirect
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Duplicate YAML v2 dependencies may cause conflicts

Medium Severity

The module has both go.yaml.in/yaml/v2 v2.4.3 and gopkg.in/yaml.v2 v2.4.0 as indirect dependencies. These are two different import paths for the same YAML library, which can cause import path conflicts and version inconsistencies. The canonical path go.yaml.in/yaml/v2 should be used exclusively, and gopkg.in/yaml.v2 should be removed or migrated via a replace directive.

Additional Locations (1)

Fix in Cursor Fix in Web

@cursor
Copy link

cursor bot commented Feb 23, 2026

Bugbot Autofix prepared fixes for 1 of the 1 bugs found in the latest run.

  • ✅ Fixed: Duplicate YAML v2 dependencies may cause conflicts
    • Added a replace directive to redirect gopkg.in/yaml.v2 to the canonical go.yaml.in/yaml/v2 v2.4.3 path, ensuring all transitive dependencies resolve to the same module and preventing type incompatibilities.

Create PR

Or push these changes by commenting:

@cursor push 00d1c9d8dc
Preview (00d1c9d8dc)
diff --git a/go.mod b/go.mod
--- a/go.mod
+++ b/go.mod
@@ -175,3 +175,7 @@
 replace google.golang.org/genproto/googleapis/rpc => google.golang.org/genproto/googleapis/rpc v0.0.0-20251124214823-79d6a2a48846
 
 replace google.golang.org/genproto/googleapis/api => google.golang.org/genproto/googleapis/api v0.0.0-20251124214823-79d6a2a48846
+
+// Redirect old YAML v2 import path to canonical path to avoid type conflicts
+// when different transitive dependencies use different import paths.
+replace gopkg.in/yaml.v2 => go.yaml.in/yaml/v2 v2.4.3

Signed-off-by: renovate-sh-app[bot] <219655108+renovate-sh-app[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

Status: In review

Development

Successfully merging this pull request may close these issues.

0 participants