Skip to content

chore(deps): update Go, Hugo, and cargo dependencies - #194

Merged
danmestas merged 2 commits into
mainfrom
chore/dep-sweep-2026-08-12
Aug 12, 2026
Merged

chore(deps): update Go, Hugo, and cargo dependencies#194
danmestas merged 2 commits into
mainfrom
chore/dep-sweep-2026-08-12

Conversation

@danmestas

@danmestas danmestas commented Aug 12, 2026

Copy link
Copy Markdown
Owner

Dependency sweep across all modules.

Changes

  • Go (root/leaf/bridge): nats.go 1.49→1.53.1, nats-server 2.12.6→2.14.5, otel 1.43→1.45, modernc sqlite 1.46→1.56, libfossil 0.6.2→0.6.3 (last release under the old module path)
  • Docs site: hextra 0.12.2→0.12.3
  • iroh-sidecar: iroh 0.97→1.0.3 — clears both open dependabot alerts (hickory-proto, high + moderate) via hickory-proto 0.26.1. SecretKey::generate API change absorbed; unused rand dep dropped. Full cargo update; ed25519/pkcs8/signature stay on the rc series required by ed25519-dalek 3.0.0-pre.1.
  • Test fix: nats.go ≥1.50 preserves header case on the wire and Header.Get is exact-match, so the traceparent test now asserts via natshdr.Carrier (production code already did)

Test plan

  • make vet, make test, CLI tests, make build (all binaries incl. sidecar) — green locally
  • make test-iroh (peer sync + convergence e2e against the iroh 1.0 sidecar) — green
  • Docs site built with Hugo and rendering verified in a browser (home + /docs/)

- nats.go 1.49→1.53.1, nats-server 2.12.6→2.14.5, otel 1.43→1.45,
  modernc sqlite 1.46→1.56, libfossil 0.6.2→0.6.3, hextra 0.12.2→0.12.3
- cargo update for iroh-sidecar; ed25519/pkcs8/signature pinned to the
  rc series required by iroh's ed25519-dalek 3.0.0-pre.1
- fix traceparent test: nats.go ≥1.50 preserves header case and Get is
  exact-match; assert via natshdr.Carrier
- rustfmt pass on sidecar sources
@cloudflare-workers-and-pages

cloudflare-workers-and-pages Bot commented Aug 12, 2026

Copy link
Copy Markdown

Deploying with  Cloudflare Workers  Cloudflare Workers

The latest updates on your project. Learn more about integrating Git with Workers.

Status Name Latest Commit Preview URL Updated (UTC)
✅ Deployment successful!
View logs
edgesync-docs 00298f2 Commit Preview URL

Branch Preview URL
Aug 12 2026, 08:32 PM

SecretKey::generate no longer takes an rng; drop now-unused rand dep.
Verified with make test-iroh (peer sync + convergence e2e).
@danmestas
danmestas merged commit 59c3978 into main Aug 12, 2026
5 checks passed
@danmestas
danmestas deleted the chore/dep-sweep-2026-08-12 branch August 12, 2026 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant