Skip to content

Bump the go-modules group in /shared/tooling with 2 updates - #47

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/shared/tooling/go-modules-2d8f2b942d
Closed

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/shared/tooling/go-modules-2d8f2b942d

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 31, 2026 •

Copy link
Copy Markdown
Contributor

Bumps the go-modules group in /shared/tooling with 2 updates: github.com/chromedp/cdproto and golang.org/x/tools.

Updates github.com/chromedp/cdproto from 0.157.8 to 0.158.6

Changelog

Sourced from github.com/chromedp/cdproto's changelog.

v0.158.6 - 2026-10-27

  • Chromium: 158.0.8127.1 (was 158.0.8124.1)
  • V8: 15.8.62 (was 15.8.47)
  • API changes since v0.158.5: 0 incompatible, 1 compatible

By package, as removed, changed and added names:

preload 0 removed 0 changed 1 added

v0.158.5 - 2026-10-25

  • Chromium: 158.0.8124.1 (was 158.0.8115.1)
  • V8: 15.8.47 (was 15.8.24)
  • API changes since v0.158.4: 0 incompatible, 1 compatible

By package, as removed, changed and added names:

network 0 removed 0 changed 1 added

v0.158.4 - 2026-10-21

  • Chromium: 158.0.8115.1 (was 158.0.8111.1)
  • V8: 15.8.24 (was 15.8.18)
  • API changes since v0.158.3: 0 incompatible, 2 compatible

By package, as removed, changed and added names:

network 0 removed 0 changed 2 added

v0.158.3 - 2026-10-19

  • Chromium: 158.0.8111.1 (was 158.0.8110.1)
  • V8: 15.8.18 (was 15.8.17)
  • API changes since v0.158.2: 0 incompatible, 0 compatible

v0.158.2 - 2026-10-17

  • Chromium: 158.0.8110.1 (was 158.0.8108.1)
  • V8: 15.8.17
  • API changes since v0.158.1: 0 incompatible, 0 compatible

v0.158.1 - 2026-10-16

  • Chromium: 158.0.8108.1 (was 158.0.8104.1)
  • V8: 15.8.17 (was 15.7.112)
  • API changes since v0.158.0: 0 incompatible, 1 compatible

By package, as removed, changed and added names:

... (truncated)

Commits
  • 448f657 Updating to 158.0.8127.1_15.8.62 definitions
  • ffa9e35 Updating to 158.0.8124.1_15.8.47 definitions
  • 3760c3c Updating to 158.0.8115.1_15.8.24 definitions
  • 9e2f767 Updating to 158.0.8111.1_15.8.18 definitions
  • ca3270c Updating to 158.0.8110.1_15.8.17 definitions
  • baa75cb Updating to 158.0.8108.1_15.8.17 definitions
  • 2c43b54 Updating to 158.0.8104.1_15.7.112 definitions
  • a4494e9 Updating to 157.0.8103.0_15.7.112 definitions
  • 9cc7a38 Updating to 157.0.8100.1_15.7.108 definitions
  • 3776604 Describe the tagging rules in the README
  • Additional commits viewable in compare view

Updates golang.org/x/tools from 0.51.0 to 0.52.0

Commits
  • 16517d9 go.mod: update golang.org/x dependencies
  • a39b773 gopls/internal/cache: fix shadowing bug
  • 2faede3 gopls/internal/test/marker: reorganize undeclared test files
  • dbca0bb go/ssa: support pointer-typed composite literals in all contexts
  • ec72d2b gopls/internal/cache: pass overlays to go mod commands
  • 2c54968 gopls/internal/golang: MoveDeclaration - fix imports for decls in multiple files
  • 1e27b6e internal/cursorutil: promote from gopls, plus other cleanups
  • 2babe1e gopls/internal/lsprpc: adjust dial retry logic
  • a3af45f internal/refactor/inline: reduce void calls in tail position
  • ac4a446 gopls/internal/filewatcher: disable TestStress/fsnotify on 386
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
  • @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
  • @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
  • @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
  • @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

Bumps the go-modules group in /shared/tooling with 2 updates: [github.com/chromedp/cdproto](https://github.com/chromedp/cdproto) and [golang.org/x/tools](https://github.com/golang/tools).


Updates `github.com/chromedp/cdproto` from 0.157.8 to 0.158.6
- [Changelog](https://github.com/chromedp/cdproto/blob/main/CHANGELOG.md)
- [Commits](chromedp/cdproto@v0.157.8...v0.158.6)

Updates `golang.org/x/tools` from 0.51.0 to 0.52.0
- [Release notes](https://github.com/golang/tools/releases)
- [Commits](golang/tools@v0.51.0...v0.52.0)

---
updated-dependencies:
- dependency-name: github.com/chromedp/cdproto
  dependency-version: 0.158.6
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
- dependency-name: golang.org/x/tools
  dependency-version: 0.52.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: go-modules
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 31, 2026
@github-actions

Copy link
Copy Markdown

Memory use at 6f90aa3

  • No change from main beyond the noise of CI in mygo.
Implementation Technology Processes Home PSS Home RSS Versions PSS Versions RSS The list adds (PSS)
mygo mygo 0.7.3, Go 1.27.3, GTK 3 (purego), CPU renderer 1 48 (+1) 61 55 (0) 70 +7

In MB, for the application and all of its child processes, sorted by the PSS of the Home page; "Versions" is the SDKs page with the available versions of Node.js listed. A number in parentheses is the difference from main, in bold when it is more than the noise of CI. "(main)" marks an implementation that this pull request did not rebuild: its numbers are those of main.

Headless server

What vfox-plus-serve serve uses on loopback with the fake vfox, in MB for the server and all of its child processes: serve-idle is settled with no browser, serve-loaded with a paired browser past its first inventory over server-sent events (vfxtool measure-serve).

Measure This pull request Main
Idle RSS 12 MB 12 MB
Idle PSS 10 MB 10 MB
Loaded RSS 13 MB 13 MB
Loaded PSS 11 MB (-1) 12 MB

Web client heap

What the paired /app page uses in headless Chrome through the Chrome DevTools Protocol, in KB: app after the SDK list settles, app-settled after twenty seconds idle on the open page with live events (vfxtool webheap).

Measure This pull request Main
App heap 16816 KB (+2824) 13992 KB
App heap settled 1036 KB (-11613) 12649 KB

Android client

What the release APK uses cold-started on an emulator, in MB from dumpsys meminfo after settling: apk-cold. Emulator boots vary, so only differences of more than 5 MB and 10% count as changes.

Measure This pull request Main
Cold RSS 166 MB (main) 166 MB
Cold PSS 37 MB (main) 37 MB
Details
  • Measured by vfxtool measure in the workflow of the implementation, on a GitHub-hosted runner with Xvfb and no GPU. These are not the numbers of docs/en/dev/memory.md, which come from another machine: compare the rows of one comment.
  • The same code does not use the same memory in every CI run, so a difference counts as a change only when it is more than 5 MB and more than 5% of the number on main.
  • Runs of this pull request: mygo.
  • Latest runs on main: mygo (96707ce).

linghengqian pushed a commit that referenced this pull request Nov 3, 2026
…x/tools 0.52.0

golang.org/x/mod 0.42.0 and golang.org/x/net 0.61.0 follow as indirect
dependencies. This is the change of the Dependabot pull request #47.
linghengqian added a commit that referenced this pull request Nov 3, 2026
)

* Let the OpenCode agent push, open pull requests and comment on them

Add opencode.jsonc, the project configuration of OpenCode, with allow rules for
the shell commands git push, gh pr create and gh pr comment.

A user can deny these commands for every project in
~/.config/opencode/opencode.json. OpenCode applies the rules of a project after
those of the user, and the last rule that matches wins, so in this repository
the agent can push its branch, open the pull request and comment on it.
gh pr merge is not among the rules and stays with the user's own configuration.

* Bump the Go modules of vfxtool: chromedp/cdproto 0.158.6, golang.org/x/tools 0.52.0

golang.org/x/mod 0.42.0 and golang.org/x/net 0.61.0 follow as indirect
dependencies. This is the change of the Dependabot pull request #47.

* Bump the GitHub Actions: setup-java 6.1.0, setup-android 4.0.4, setup-gradle 6.4.1, download-artifact 8.0.2

This is the change of the Dependabot pull request #48. The actions stay pinned
to commit SHAs.

* Drop the package list from the Android SDK setup

The default package list of setup-android used to name the `tools` package,
which Google removed, so the workflow asked for `platform-tools` alone.
setup-android 4.0.2 fixed that: the default is now `platform-tools`, which is
what the workflow asked for. The list and the comment that explained it are no
longer needed.

* Keep the Gradle caching of the Android workflow open source

setup-gradle 6 moved the Gradle User Home caching into gradle-actions-caching,
a closed-source component under the Gradle Technologies Terms of Use, and made
it the default: upgrading to v6 accepts those terms. Since 6.1.0 the MIT-licensed
`basic` provider, built on actions/cache, is an alternative, and the component
is neither loaded nor used with it. Choose it, so that the workflow stays on
open-source components, as it was with v5.

`basic` has no cache cleanup and no deduplication, and starts a new cache when
a build file changes. To take the default again, delete the line.

---------

Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

@linghengqian linghengqian left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Fixed by #49 .

@dependabot
dependabot Bot deleted the dependabot/go_modules/shared/tooling/go-modules-2d8f2b942d branch November 3, 2026 03:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant