all: update dependencies

[RaduBerinde]

We haven't updated our vendored dependencies in a while.

[knz]

@benesch @bdarnell do we have a process in place to periodically update dependencies?

[RaduBerinde]

I don't think so. I was planning to do it this time but forgot about it. I'll try to get to it.

[tbg]

We need to audit all the commits we're picking up. I remember that @tamird had some script to do this automatically. @tamird, do you remember where that went?

[benesch]

Are you thinking of github.com/dt/depdiff?

…

On Wed, Dec 5, 2018 at 7:17 AM Tobias Grieger ***@***.***> wrote: We need to audit all the commits we're picking up. I remember that @tamird <https://github.com/tamird> had some script to do this automatically. @tamird <https://github.com/tamird>, do you remember where that went? — You are receiving this because you were mentioned. Reply to this email directly, view it on GitHub <#30774 (comment)>, or mute the thread <https://github.com/notifications/unsubscribe-auth/AA15IMK5xWpjsSm2w87wpQfOtgsN8PK0ks5u17logaJpZM4W_C1y> .

[tbg]

That's exactly it, thanks!

[RaduBerinde]

Great! I will try to do it in multiple batches, and separate out the more important packages (like gRPC), so we can at least bisect if there's a problem.

[petermattis]

Note that @benesch and I are bumping RocksDB (which is a massive pain).

[RaduBerinde]

I believe that I updated all dependencies, except github.com/Shopify/sarama which @danhhz will update later in the release. Some of the dependencies have already had updates since so we may want to do a full update at that point.

I will keep the issue open as a reminder to update deps periodically.

[github-actions]

We have marked this issue as stale because it has been inactive for
18 months. If this issue is still relevant, removing the stale label
or adding a comment will keep it active. Otherwise, we'll close it in
10 days to keep the issue queue tidy. Thank you for your contribution
to CockroachDB!