Skip to content

chore(deps): bump golang.org/x/mod from 0.24.0 to 0.42.0 in /generators/go - #18329

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/generators/go/golang.org/x/mod-0.42.0
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/generators/go/golang.org/x/mod-0.42.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 15, 2026 •

Copy link
Copy Markdown
Contributor

Bumps golang.org/x/mod from 0.24.0 to 0.42.0.

Commits
  • b5136e5 sumdb/tlog: use recorded responses in TestCertificateTransparency
  • 1e9a5ae go.mod: update golang.org/x dependencies
  • d0a27b2 modfile: fix Cleanup and DropTool documentation
  • d12008c all: upgrade go directive to at least 1.26.0 [generated]
  • d3398d0 go.mod: update golang.org/x dependencies
  • 57549bf sumdb: ignore unrelated hashes in Lookup
  • 96f62ae sumdb/tlog: fix TileHashReader authentication bypass
  • 13be902 go.mod: update golang.org/x dependencies
  • 792ac16 go.mod: update golang.org/x dependencies
  • fe2ec04 all: fix some comments to improve readability
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Devin Review

Bumps [golang.org/x/mod](https://github.com/golang/mod) from 0.24.0 to 0.42.0.
- [Commits](golang/mod@v0.24.0...v0.42.0)

---
updated-dependencies:
- dependency-name: golang.org/x/mod
  dependency-version: 0.42.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update Go code labels Oct 15, 2026

@nitpickybot nitpickybot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

AI Review Summary

Dependabot bump of golang.org/x/mod (0.24.0 → 0.42.0) and golang.org/x/tools (0.32.0 → 0.51.0) in generators/go. The notable side effect is the go directive jumping from 1.23.0 to 1.26.0, which raises the minimum toolchain required to build this generator.

  • 🟡 1 warning(s)

Review Scope

  • Mode: Full pull request
  • Range: Full pull request through 93becc40dd930102b326e0cf7a870ea93c812665
  • Current range coverage: Complete
  • Cumulative pull request coverage: Complete

This review is complete for the current scope. Addressing all critical and warning findings above satisfies the review; suggestions are optional. Request another review only if subsequent changes introduce new behavior or materially expand the pull request's scope.

Comment thread generators/go/go.mod
module github.com/fern-api/fern-go

go 1.23.0
go 1.26.0

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🟡 warning

This bump drags the go directive from 1.23.0 to 1.26.0 (x/mod v0.42.0 requires it). That makes Go 1.26 the hard minimum for anyone building or go install-ing this generator — CI images, Dockerfiles, and downstream consumers pinned to an older toolchain will fail with go.mod requires go >= 1.26.0. Worth confirming the generator's build images are on 1.26 before merging; otherwise consider pinning x/mod to the last release compatible with 1.23.

@github-actions
github-actions Bot enabled auto-merge (squash) October 15, 2026 18:36

@devin-ai-integration devin-ai-integration Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🔍 Devin Review: 1 flag

Not posted on this PR by your GitHub settings — view it in Devin Review. (Configure)

Devin Review

@github-actions

Copy link
Copy Markdown
Contributor

SDK Generation Benchmark Results

Comparing PR branch against median of 5 nightly run(s) on main (latest: 2026-10-15T04:05:56Z).

Full benchmark table (click to expand)
Generator Spec main (generator) main (E2E) PR (generator) Delta
go-sdk square 106s (n=5) 224s (n=5) 140s +34s (+32.1%)

main (generator): generator-only time via --skip-scripts (includes Docker image build, container startup, IR parsing, and code generation — this is the same Docker-based flow customers use via fern generate). main (E2E): full customer-observable time including build/test scripts (nightly baseline, informational). Delta is computed against generator-only baseline.
⚠️ = generation exited with a non-zero exit code (timing may not reflect a successful run).
Baseline from nightly runs on main (latest: 2026-10-15T04:05:56Z). Trigger benchmark-baseline to refresh.
Last updated: 2026-10-15 18:47 UTC

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update Go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants