Skip to content

Upgrade dependencies, Go and protobuf - #3

Merged
F21 merged 4 commits into
mainfrom
upgrades
Sep 3, 2026
Merged

F21 merged 4 commits into
mainfrom
upgrades

Conversation

@F21

@F21 F21 commented Sep 3, 2026

Copy link
Copy Markdown
Member

No description provided.

Copilot AI lite review requested due to automatic review settings September 3, 2026 23:31
@github-actions

github-actions Bot commented Sep 3, 2026

Copy link
Copy Markdown

The latest Buf updates on your PR. Results from workflow Tests / test (pull_request).

BuildFormatLintBreakingUpdated (UTC)
✅ passed✅ passed✅ passed❌ failed (92)Sep 3, 2026, 11:32 PM

@qltysh

qltysh Bot commented Sep 3, 2026

Copy link
Copy Markdown

❌ 3 blocking issues (3 total)

Tool Category Rule Count
zizmor Vulnerability credential persistence through GitHub Actions artifacts 2 ❌
zizmor Vulnerability unpinned action reference 1 ❌

runs-on: ubuntu-latest
steps:
- uses: actions/checkout@v5
- uses: actions/checkout@v7

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

credential persistence through GitHub Actions artifacts [zizmor:zizmor/artipacked]

@@ -16,10 +16,10 @@ jobs:
pull-requests: write
steps:
- name: Checkout code

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

credential persistence through GitHub Actions artifacts [zizmor:zizmor/artipacked]

- name: Set environment variables from .env
uses: xom9ikk/dotenv@v2.3.0
- uses: actions/setup-go@v5
uses: xom9ikk/dotenv@v2.4.0

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

unpinned action reference [zizmor:zizmor/unpinned-uses]

Copilot AI left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 Changes recommended

The repo’s declared Go version in go.mod is inconsistent with the CI Go version sourced from .env, making the intended minimum/target Go version unclear and prone to drift.

Once you've addressed the issues Copilot identified, you can request another Copilot review.

Pull request overview

This PR upgrades the repository’s protobuf/tooling and Go ecosystem to support Protobuf Edition 2024 and newer generator/runtime versions, updating generated Go outputs and CI accordingly.

Changes:

  • Migrates protobuf sources from edition = "2023" to edition = "2024" and regenerates Go code with protoc-gen-go v1.36.12.
  • Updates Go module dependencies (including google.golang.org/protobuf) and Buf generation configuration/lockfile.
  • Updates GitHub Actions workflows and the pinned CI Go version in .env.
File summaries
File Description
proto/protoprivacy/boostport/privacy/privacy.proto Switches protobuf edition to 2024.
proto/protoprivacy-testing/boostport/privacy/testing/valid.proto Switches protobuf edition to 2024 for test protos.
proto/protoprivacy-testing/boostport/privacy/testing/test.proto Switches protobuf edition to 2024 for test protos.
proto/protoprivacy-testing/boostport/privacy/testing/passthrough.proto Switches protobuf edition to 2024 for test protos.
proto/protoprivacy-testing/boostport/privacy/testing/invalid.proto Switches protobuf edition to 2024 for test protos.
internal/generated/boostport/privacy/testing/valid.pb.go Regenerates Go output with updated protoc-gen-go/runtime metadata.
internal/generated/boostport/privacy/testing/test.pb.go Regenerates Go output with updated protoc-gen-go/runtime metadata.
internal/generated/boostport/privacy/testing/passthrough.pb.go Regenerates Go output with updated protoc-gen-go/runtime metadata.
internal/generated/boostport/privacy/testing/invalid.pb.go Regenerates Go output with updated protoc-gen-go/runtime metadata.
internal/generated/boostport/privacy/privacy.pb.go Regenerates Go output with updated protoc-gen-go/runtime metadata.
go.sum Refreshes dependency checksums after upgrades.
go.mod Updates module Go version and dependency versions.
buf.lock Updates Buf dependency lock to a newer commit/digest.
buf.gen.yaml Updates remote protoc-gen-go plugin version and generation options.
.github/workflows/tests.yml Updates action versions and Go setup in CI.
.github/workflows/push-to-bsr.yml Updates checkout action version for publishing workflow.
.env Updates CI Go version value consumed by workflows.
Review details
  • Files reviewed: 10/17 changed files
  • Comments generated: 1
  • Review effort level: Lite

💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.

Comment thread go.mod
module github.com/Boostport/protoprivacy

go 1.24
go 1.25.10
@F21
F21 merged commit 581ec1f into main Sep 3, 2026
2 of 3 checks passed
@F21
F21 deleted the upgrades branch September 3, 2026 23:41
@F21
F21 restored the upgrades branch September 3, 2026 23:44
@F21
F21 deleted the upgrades branch September 3, 2026 23:47
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants