graham/terraform-provider-towerops
Watch
1
0
Fork
You've already forked terraform-provider-towerops
 0
Code Issues Pull requests 3 Projects Releases Packages Wiki Activity Actions

chore: update dependencies #1

Open
graham wants to merge 1 commit from chore/update-dependencies into main
pull from: chore/update-dependencies
merge into: graham:main
Conversation 1 Commits 1 Files changed 5 +100 -115
graham commented 2026-11-01 20:46:13 +00:00
Owner
Copy link

Updates Go module dependencies, the Go toolchain requirement, and release actions.

Verification: go test ./..., go vet ./..., go mod verify, build, and OpenTofu validate. golangci-lint reports existing errcheck and unused issues.

Updates Go module dependencies, the Go toolchain requirement, and release actions. Verification: go test ./..., go vet ./..., go mod verify, build, and OpenTofu validate. golangci-lint reports existing errcheck and unused issues.
chore: update dependencies
All checks were successful
skippy-bot/review Skippy review: clean — no open findings
Details
988dbd7855
skippy-bot commented 2026-11-01 20:58:58 +00:00
First-time contributor
Copy link

Clean at 988dbd7 — no blocking findings.

Verified rather than assumed, since a dependency bump is exactly where a bad hash or an unexecutable action hides:

  • go.sum: every hash for all 32 bumped modules matches the Go checksum database (sum.golang.org/lookup), and every require in go.mod has both its h1 and /go.mod entries. The otel / go-logr / xxhash / google-uuid lines dropped are content hashes of modules no imported package reaches; nothing in the build list lost a hash.
  • MVS: terraform-plugin-testing v1.16.0's own requirements are all <= the versions selected here (plugin-go 0.31.0, exec 0.26.0, json 0.29.0, sdk 2.40.1, crypto 0.58.0), so the bump is internally consistent and no indirect requirement is under-satisfied.
  • API: v1.16.0 still exports everything the tests use — resource.Test, TestCase.ProtoV6ProviderFactories, TestStep, ComposeAggregateTestCheckFunc, TestCheckResourceAttr{,Set}.
  • Toolchain: go1.26.10 and go1.26.0 are both real releases (go.dev/dl), so .tool-versions and the go directive resolve.
  • Actions: code.forgejo.org/actions/{checkout,setup-go}@v7 exist, and both declare runs.using: node24 — supported by this instance's runner (forgejo-runner v12.7.2), so the release job will resolve them.

One thing to know rather than fix: this repo has no CI workflow (0 action runs on the instance), so the tag-triggered release is the first place the action bumps get exercised.

Nothing to fix.

**Clean at `988dbd7` — no blocking findings.** Verified rather than assumed, since a dependency bump is exactly where a bad hash or an unexecutable action hides: - **go.sum**: every hash for all 32 bumped modules matches the Go checksum database (`sum.golang.org/lookup`), and every `require` in go.mod has both its `h1` and `/go.mod` entries. The otel / go-logr / xxhash / google-uuid lines dropped are content hashes of modules no imported package reaches; nothing in the build list lost a hash. - **MVS**: terraform-plugin-testing v1.16.0's own requirements are all `<=` the versions selected here (plugin-go 0.31.0, exec 0.26.0, json 0.29.0, sdk 2.40.1, crypto 0.58.0), so the bump is internally consistent and no indirect requirement is under-satisfied. - **API**: v1.16.0 still exports everything the tests use — `resource.Test`, `TestCase.ProtoV6ProviderFactories`, `TestStep`, `ComposeAggregateTestCheckFunc`, `TestCheckResourceAttr{,Set}`. - **Toolchain**: `go1.26.10` and `go1.26.0` are both real releases (go.dev/dl), so `.tool-versions` and the `go` directive resolve. - **Actions**: `code.forgejo.org/actions/{checkout,setup-go}@v7` exist, and both declare `runs.using: node24` — supported by this instance's runner (`forgejo-runner v12.7.2`), so the release job will resolve them. One thing to know rather than fix: this repo has no CI workflow (0 action runs on the instance), so the tag-triggered release is the first place the action bumps get exercised. Nothing to fix. <!-- skippy-pr-review -->
All checks were successful
skippy-bot/review Skippy review: clean — no open findings
Details
This pull request can be merged automatically.
You are not authorized to merge this pull request.
View command line instructions

Checkout

From your project repository, check out a new branch and test the changes.
git fetch -u origin chore/update-dependencies:chore/update-dependencies
git switch chore/update-dependencies

Merge

Merge the changes and update on Forgejo.

Warning: The "Autodetect manual merge" setting is not enabled for this repository, you will have to mark this pull request as manually merged afterwards.

git switch main
git merge --no-ff chore/update-dependencies
git switch chore/update-dependencies
git rebase main
git switch main
git merge --ff-only chore/update-dependencies
git switch chore/update-dependencies
git rebase main
git switch main
git merge --no-ff chore/update-dependencies
git switch main
git merge --squash chore/update-dependencies
git switch main
git merge --ff-only chore/update-dependencies
git switch main
git merge chore/update-dependencies
git push origin main
Sign in to join this conversation.
Reviewers
No reviewers
Labels
Clear labels
No items
No labels
Milestone
Clear milestone
No items
No milestone
Projects
Clear projects
No items
No project
Assignees
Clear assignees
No assignees
2 participants
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set

Reference
graham/terraform-provider-towerops!1
No description provided.