Skip to content

build(deps): consolidate dependency updates#3409

Merged
tac0turtle merged 2 commits into
mainfrom
chore/consolidate-dependency-updates
Jul 27, 2026
Merged

build(deps): consolidate dependency updates#3409
tac0turtle merged 2 commits into
mainfrom
chore/consolidate-dependency-updates

Conversation

@tac0turtle

@tac0turtle tac0turtle commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Summary

Consolidates the five open Dependabot updates into one reviewable dependency update:

  • github.com/quic-go/webtransport-go 0.10.0 → 0.11.1 across the root, apps/evm, apps/testapp, and test/e2e modules.
  • Its transitive github.com/quic-go/quic-go update 0.59.1 → 0.60.0 and generated checksums.
  • Docs lockfile updates: dompurify 3.4.11 → 3.4.12 and postcss 8.5.12/8.5.19 → 8.5.23.

webtransport-go 0.11.x requires Go 1.25; this repository already declares Go 1.25.8.

Supersedes #3403, #3404, #3405, #3406, and #3407.

Validation

Passed locally:

  • just build-all
  • just deps with no resulting diff
  • just test
  • just test-cover
  • just test-integration-cover
  • go vet for all affected Go modules
  • golangci-lint run ./...
  • yarn install --frozen-lockfile && yarn build in docs/

Not run to completion locally: just test-e2e and just test-evm both require Docker, but the local OrbStack daemon is stopped. Their failures occurred before project test execution.

Summary by CodeRabbit

  • Chores
    • Updated underlying networking components across the application and test environments.
    • Improved compatibility with current transport protocols and related tooling.
    • No user-facing features or behavior changes were introduced.

@coderabbitai

coderabbitai Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

Review Change Stack

No actionable comments were generated in the recent review. 🎉

ℹ️ Recent review info
⚙️ Run configuration

Configuration used: defaults

Review profile: CHILL

Plan: Pro Plus

Run ID: d353554e-f62f-44a7-a5b3-ae4ef6a4d8cd

📥 Commits

Reviewing files that changed from the base of the PR and between ec029e0 and de04609.

⛔ Files ignored due to path filters (6)
  • apps/evm/go.sum is excluded by !**/*.sum
  • apps/testapp/go.sum is excluded by !**/*.sum
  • docs/yarn.lock is excluded by !**/yarn.lock, !**/*.lock
  • execution/evm/test/go.sum is excluded by !**/*.sum
  • go.sum is excluded by !**/*.sum
  • test/e2e/go.sum is excluded by !**/*.sum
📒 Files selected for processing (4)
  • apps/evm/go.mod
  • apps/testapp/go.mod
  • go.mod
  • test/e2e/go.mod

📝 Walkthrough

Walkthrough

Changes

QUIC dependency updates

Layer / File(s) Summary
Align indirect module requirements
go.mod, apps/evm/go.mod, apps/testapp/go.mod, test/e2e/go.mod
The QUIC dependency is updated to v0.60.0 and the WebTransport dependency to v0.11.1 across all four Go modules.

Estimated code review effort: 1 (Trivial) | ~5 minutes

Suggested reviewers: julienrbrt, chatton

🚥 Pre-merge checks | ✅ 5
✅ Passed checks (5 passed)
Check name Status Explanation
Title check ✅ Passed The title accurately summarizes the main change: consolidating dependency updates.
Description check ✅ Passed The description covers the change summary and validation clearly, though it uses "Summary" instead of the template's "Overview" heading.
Docstring Coverage ✅ Passed No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.
Linked Issues check ✅ Passed Check skipped because no linked issues were found for this pull request.
Out of Scope Changes check ✅ Passed Check skipped because no linked issues were found for this pull request.
✨ Finishing Touches
🧪 Generate unit tests (beta)
  • Create PR with unit tests
  • Commit unit tests in branch chore/consolidate-dependency-updates

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

Comment @coderabbitai help to get the list of available commands.

@github-actions

github-actions Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor

The latest Buf updates on your PR. Results from workflow CI / buf-check (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed⏩ skipped✅ passed⏩ skippedJul 27, 2026, 9:04 AM

@github-actions

github-actions Bot commented Jul 27, 2026

Copy link
Copy Markdown
Contributor
PR Preview Action v1.8.1
Preview removed because the pull request was closed.
2026-07-27 09:04 UTC

@codecov

codecov Bot commented Jul 27, 2026

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 62.33%. Comparing base (2a19748) to head (41a0cc3).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files
@@           Coverage Diff           @@
##             main    #3409   +/-   ##
=======================================
  Coverage   62.33%   62.33%           
=======================================
  Files         120      120           
  Lines       13461    13461           
=======================================
  Hits         8391     8391           
  Misses       4128     4128           
  Partials      942      942           
Flag Coverage Δ
combined 62.33% <ø> (ø)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@tac0turtle
tac0turtle marked this pull request as ready for review July 27, 2026 08:34
@tac0turtle
tac0turtle merged commit 7f2f0b5 into main Jul 27, 2026
8 of 9 checks passed
@tac0turtle
tac0turtle deleted the chore/consolidate-dependency-updates branch July 27, 2026 08:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant