build(deps): core/go v0.12.1 — a true no-op bump (34 → 34), plus the layer finding

[Snider]

This is a no-op bump. It clears zero windows-lane packages. The original body claimed it would clear 33; the run says otherwise, and the layer analysis below is the actual finding. Landing it anyway because the pin should not drift and the fixes it carries are real.

Measured: 34 → 34

dappco.re/go v0.12.1 is in the build (confirmed in the run's module output), and every error count is byte-identical:

error shape	before	after
path escapes from parent	399	399
cannot find the path specified	19	19
Program.Find	41	41

Not one package cleared (run 31253505190).

Why — both fixes are correct and both land on a layer this repo does not call

core/go #21 (Fs.path) is not what fails here. path escapes from parent is not core/go's message at all — it is Go's own os.Root error. io.Local is built in dappco.re/go/io, a separate module:

io.go:143            Local, err = local.New("/")
local/medium.go:60   rootHandle, err := os.OpenRoot(absoluteRoot)

It never touches core.Fs. os.OpenRoot confines every operation to a directory handle, so on Windows io.Local is scoped to one drive: a path on another drive escapes, and a relative path resolves against the drive root rather than the cwd. 30 packages.

That containment is the design, not a defect — it is the security property io.Local exists to provide, and drive-scoping on Windows is it working as built. The fix is therefore consumer-side and in this repo: call sites handling unbounded or user-supplied paths belong on core.Stat/core.ReadFile/core primitives, with the medium kept for genuinely rooted trees. Same pattern the estate applied in go-render #49/#51, documented as estate task #121. Tracked separately from this bump.

core/go #22 (App.Find) is not what this repo calls. Program.Find is process.Program.Find in dappco.re/go/process, which resolves through a second copy of lookPath in os_exec_link.go that my own v0.16.2 missed — exec/ was fixed, the root package was not. 3 packages. Fixed in go-process#10.

What this bump is worth

App.Find and Fs.path were genuinely broken and are genuinely fixed. They are simply not the code paths go-inference exercises. Keeping the pin current costs nothing and stops drift.

Receipts — macOS

GOWORK=off go test -count=1 ./...          exit=0, 176 packages ok
GOWORK=off go build ./... · go vet ./...    clean
cli:      go test -count=1 ./tui/...        ok 6.510s
examples: go build ./... · go vet ./...     clean

CI: linux ✅ macos ✅ · windows unchanged at 34 (experimental lane).

Scope

Only go/ is bumped. cli/ pins v0.12.0 and examples/ v0.11.0; both build through the workspace, which already selects the highest version across modules — the skew predates this and is not widened by it.

[coderabbitai]

Warning

Review limit reached

@Snider, you've reached your PR review limit, so we couldn't start this review.

Next review available in: 42 minutes

You've used all free OSS reviews for now. Wait for the free limit to reset to keep reviewing this public repository.

How can I continue?

After more reviews become available, a review can be triggered using the @coderabbitai review command as a PR comment. Alternatively, push new commits to this PR.

To avoid repeated limits, reduce automatic review volume by pausing incremental auto-reviews earlier, using label-based review opt-in, excluding WIP or generated PR titles, or requesting reviews manually when the PR is ready. If your team needs uninterrupted high-volume reviews, an organization admin can enable usage-based reviews.

How do review limits work?

CodeRabbit enforces per-developer PR review limits for each organization. Most developers receive the normal plan review availability.

For paid Pro and Pro+ PR reviews, CodeRabbit uses adaptive limits for sustained high-volume activity. When a developer's recent PR review activity reaches the 95th percentile or higher among CodeRabbit users, additional reviews become available more gradually as earlier reviews age out of the rolling window.

Please refer docs for additional details.

Review details

⚙️ Run configuration

Configuration used: Organization UI

Review profile: CHILL

Plan: Pro Plus

Run ID: ca2178fb-cc1d-4212-8f98-0a5088e8541e

📥 Commits

Reviewing files that changed from the base of the PR and between 05af590 and 04f09c9.

⛔ Files ignored due to path filters (1)

• go/go.sum is excluded by !**/*.sum

📒 Files selected for processing (1)

• go/go.mod

Warning

Billing warning: we have not been able to collect payment for this subscription for more than 72 hours. Please update the payment method or pay any pending invoices in Billing to avoid service interruption.

---

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}