Skip to content

chore: bump direct Go dependencies#3776

Merged
dgageot merged 4 commits into
docker:mainfrom
dgageot:bump-go-deps
Jul 22, 2026
Merged

chore: bump direct Go dependencies#3776
dgageot merged 4 commits into
docker:mainfrom
dgageot:bump-go-deps

Conversation

@dgageot

@dgageot dgageot commented Jul 21, 2026

Copy link
Copy Markdown
Member

Routine bump of direct Go dependencies. Each module was updated individually, with lint and tests run after every bump to catch regressions early. Pre-existing TestLoadExamples failures were confirmed to be environmental (Docker Model Runner not running) and reproduced before any changes were made.

All bumps landed cleanly except google.golang.org/adk, which was skipped. The v1.5.0 release deprecates adka2a in favour of adka2a/v2, causing a lint failure; migrating pkg/a2a to the new a2a-go/v2 API is a separate task.

Module From To Status
github.com/aws/aws-sdk-go-v2 v1.42.1 v1.43.0 bumped
github.com/aws/aws-sdk-go-v2/config v1.32.30 v1.32.31 bumped
github.com/aws/aws-sdk-go-v2/credentials v1.19.29 v1.19.30 bumped (with config)
github.com/aws/aws-sdk-go-v2/service/bedrockruntime v1.55.1 v1.56.0 bumped
github.com/aws/aws-sdk-go-v2/service/sts v1.44.1 v1.45.0 bumped (with config)
github.com/dop251/goja v0.0.0-20260719185829-0fc1d42c1dc9 v0.0.0-20260721123636-c65cf2f023c8 bumped
google.golang.org/adk v1.2.0 v1.5.0 skipped — v1.5.0 deprecates adka2a (lint failure); migrating to adka2a/v2 requires porting pkg/a2a to a2a-go/v2, a separate task

dgageot added 4 commits July 21, 2026 22:07
Also bumps credentials to v1.19.30 and sts to v1.45.0 (pulled transitively).

Assisted-By: docker-agent
…o v0.0.0-20260721123636-c65cf2f023c8

Assisted-By: docker-agent
@dgageot
dgageot requested a review from a team as a code owner July 21, 2026 20:17

@docker-agent docker-agent left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Assessment: 🟢 APPROVE

This is a routine, well-formed dependency bump. All AWS SDK sub-modules were updated in lock-step (aws-sdk-go-v2 core, config, credentials, bedrockruntime, sts, plus their internal dependencies), which is the expected pattern for a coherent AWS SDK release. The goja pseudo-version update is structurally correct.

The intentional skip of google.golang.org/adk v1.5.0 is appropriately documented in the PR description. No compilation errors or API-breaking changes were introduced by the bumped modules.

@aheritier aheritier added area/deps Dependency updates and version bumps kind/chore Maintenance, deps, CI, tooling (maps to chore: commit prefix) labels Jul 21, 2026
@dgageot
dgageot merged commit cf4c662 into docker:main Jul 22, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

area/deps Dependency updates and version bumps kind/chore Maintenance, deps, CI, tooling (maps to chore: commit prefix)

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants