Skip to content

chore: upgrade dependencies and fix grpc vulnerabilities#212

Merged
hgiasac merged 1 commit intomainfrom
chore/fix-grpc-vulnerabilities
Apr 6, 2026
Merged

chore: upgrade dependencies and fix grpc vulnerabilities#212
hgiasac merged 1 commit intomainfrom
chore/fix-grpc-vulnerabilities

Conversation

@hgiasac
Copy link
Copy Markdown
Collaborator

@hgiasac hgiasac commented Apr 6, 2026

This pull request primarily updates dependencies across multiple go.mod files to newer versions, focusing on OpenTelemetry, Hasura, and other core libraries. Additionally, it updates function calls in connector/telemetry.go to use new utility methods, reflecting changes in the telemetry utilities package.

Dependency updates:

  • Upgraded OpenTelemetry modules (e.g., go.opentelemetry.io/otel, exporters, metrics, log, proto, etc.) to v1.43.0 and related submodules to their latest compatible versions in all go.mod files. [1] [2] [3] [4] [5] [6] [7]
  • Updated other core dependencies, including github.com/hasura/gotel, github.com/alecthomas/kong, github.com/klauspost/compress, golang.org/x/sync, golang.org/x/sys, golang.org/x/text, and google.golang.org/grpc to their latest versions. [1] [2] [3] [4] [5] [6] [7] [8]

Code changes for telemetry utilities:

  • Updated the SetSpanHeaderAttributes function in connector/telemetry.go to use otelutils.ExtractTelemetryHeaders and otelutils.SetSpanHeaderMatrixAttributes, reflecting changes in the telemetry utility API.

These changes ensure the codebase stays up to date with the latest features, bug fixes, and security patches from upstream dependencies, and maintain compatibility with updated telemetry utility functions.

@github-actions
Copy link
Copy Markdown

github-actions Bot commented Apr 6, 2026

Code Coverage

Package Line Rate Health
github.com/hasura/ndc-codegen-example 98%
github.com/hasura/ndc-codegen-example/functions 63%
github.com/hasura/ndc-codegen-example/types/arguments 43%
github.com/hasura/ndc-codegen-example/types 33%
github.com/hasura/ndc-sdk-go/v2/cmd/hasura-ndc-go/command/internal 84%
github.com/hasura/ndc-sdk-go/v2/cmd/hasura-ndc-go/command 46%
github.com/hasura/ndc-sdk-go/v2/cmd/hasura-ndc-go/version 62%
github.com/hasura/ndc-sdk-go/v2/connector 67%
github.com/hasura/ndc-sdk-go/v2/credentials 75%
github.com/hasura/ndc-sdk-go/v2/example/reference 54%
github.com/hasura/ndc-sdk-go/v2/ndctest 68%
github.com/hasura/ndc-sdk-go/v2/scalar 90%
github.com/hasura/ndc-sdk-go/v2/schema 23%
github.com/hasura/ndc-sdk-go/v2/utils/compression 67%
github.com/hasura/ndc-sdk-go/v2/utils 53%
Summary 47% (12445 / 26712)

Minimum allowed line rate is 40%

@hgiasac hgiasac merged commit 6f1cbad into main Apr 6, 2026
2 checks passed
@hgiasac hgiasac deleted the chore/fix-grpc-vulnerabilities branch April 6, 2026 08:11
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant