build(deps): bump github.com/nats-io/nats-server/v2 from 2.12.1 to 2.12.6 in /orchestrion/all#15
Conversation
Bumps [github.com/nats-io/nats-server/v2](https://github.com/nats-io/nats-server) from 2.12.1 to 2.12.6. - [Release notes](https://github.com/nats-io/nats-server/releases) - [Changelog](https://github.com/nats-io/nats-server/blob/main/RELEASES.md) - [Commits](nats-io/nats-server@v2.12.1...v2.12.6) --- updated-dependencies: - dependency-name: github.com/nats-io/nats-server/v2 dependency-version: 2.12.6 dependency-type: indirect ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes and found 1 potential issue.
Bugbot Autofix prepared a fix for the issue found in the latest run.
- ✅ Fixed: Minimum Go version raised breaking project-wide policy
- I confirmed the 1.25.0 directive broke workspace compatibility under Go 1.24 and fixed it by restoring
orchestrion/all/go.modtogo 1.24.0.
- I confirmed the 1.25.0 directive broke workspace compatibility under Go 1.24 and fixed it by restoring
Or push these changes by commenting:
@cursor push d8a522fc4c
Preview (d8a522fc4c)
diff --git a/orchestrion/all/go.mod b/orchestrion/all/go.mod
--- a/orchestrion/all/go.mod
+++ b/orchestrion/all/go.mod
@@ -1,6 +1,6 @@
module github.com/DataDog/dd-trace-go/orchestrion/all/v2
-go 1.25.0
+go 1.24.0
require (
github.com/DataDog/dd-trace-go/contrib/99designs/gqlgen/v2 v2.6.0-dev.1You can send follow-ups to this agent here.
Comment @cursor review or bugbot run to trigger another review on this PR
| module github.com/DataDog/dd-trace-go/orchestrion/all/v2 | ||
|
|
||
| go 1.24.0 | ||
| go 1.25.0 |
There was a problem hiding this comment.
Minimum Go version raised breaking project-wide policy
Medium Severity
The go directive was bumped from 1.24.0 to 1.25.0, making orchestrion/all the only module in the entire workspace requiring Go 1.25. Every other module and the go.work file itself use go 1.24.0, with go.work explicitly commenting "Go version must match the lowest supported version, not the highest." This is an unintended side effect of go mod tidy propagating a transitive dependency's Go version requirement, and it breaks compatibility for consumers still on Go 1.24.x.
Bumps github.com/nats-io/nats-server/v2 from 2.12.1 to 2.12.6.
Release notes
Sourced from github.com/nats-io/nats-server/v2's releases.
... (truncated)
Commits
0e06390Release v2.12.6f593d27Cherry-picks for 2.12.6 (#61)9f904de[FIXED] Incomplete route pool on premature pongb510192[FIXED] Avoid stalling read loop on leafnode ErrMinimumVersionRequired53941c2Report the account and user name in USER.INFO request1ab002a[IMPROVED] Support HTTP proxy connection from leaf nodes also for TCP8b64082Release v2.12.6-RC.3e6ab7e9Cherry-picks for 2.12.6-RC.3 (#59)9f4d960Make the deduplication window actually work for deduplication for sourcing304e184Remove FIXME about auth callout nonceDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)You can disable automated security fix PRs for this repo from the Security Alerts page.
Note
Medium Risk
Primarily dependency and Go toolchain version bumps, but raising
goto 1.25 may affect CI/build compatibility and could surface behavior changes in updated transitive libraries.Overview
Updates
orchestrion/allto Go1.25.0and refreshes its module set, most notably bumpinggithub.com/nats-io/nats-server/v2tov2.12.6(with correspondingnats.go,jwt, andnkeysupdates).Also rolls forward several indirect dependencies (e.g.,
golang.org/x/*,klauspost/compress,google/go-tpm,antithesis-sdk-go) and updatesgo.sumaccordingly.Written by Cursor Bugbot for commit b85c39b. Configure here.