Skip to content

chore(deps): weekly safe go updates · 1 package#3

Open
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-go-20260727
Open

chore(deps): weekly safe go updates · 1 package#3
mendral-app[bot] wants to merge 1 commit into
mainfrom
mendral/deps/weekly-safe-go-20260727

Conversation

@mendral-app

@mendral-app mendral-app Bot commented Jul 27, 2026

Copy link
Copy Markdown

Packages bumped

Package Old New Type
cuelang.org/go v0.17.0 v0.17.1 patch
Per-package detail

cuelang.org/go v0.17.0 → v0.17.1

Changelog highlights (bugfix-only release):

  • Fixed several v0.17.0 regressions: panic on some disjunctions, spurious "invalid interpolation" errors, spurious "field not allowed" errors, spurious "structural cycle" errors involving comprehensions or self references
  • Fixed two regressions causing evaluation hangs
  • Fixed two long-standing hangs on self-referencing configurations
  • Fixed panic in cue exp gengotypes when a definition references a definition from another package via embedding
  • Module replacements now subject to minimum-version selection

Impact on this codebase: cuelang.org/go is the CUE evaluation engine used throughout backend/internal/evaluation/. This patch stabilizes the evaluator — all fixes are for panics/hangs that could surface on complex CUE inputs. No API changes, no behavioral shifts for correct inputs.

Files modified

  • backend/go.mod
  • backend/go.sum
Skipped this ecosystem
Package Current Latest Reason
github.com/gin-gonic/gin v1.12.0 v1.12.0 Already at latest stable
github.com/go-git/go-git/v5 v5.19.1 v5.19.1 Already at latest stable
github.com/joho/godotenv v1.5.1 v1.6.0-pre.4 Only pre-release available
golang.org/x/crypto v0.54.0 v0.54.0 Already at latest
golang.org/x/net v0.57.0 v0.57.0 Already at latest
golang.org/x/sys v0.47.0 v0.47.0 Already at latest
golang.org/x/text v0.40.0 v0.40.0 Already at latest
golang.org/x/sync v0.22.0 v0.22.0 Already at latest
google.golang.org/protobuf v1.36.11 v1.36.11 Already at latest

Note

Created by Mendral. Tag @mendral-app with feedback or questions.

@mendral-app
mendral-app Bot marked this pull request as ready for review July 27, 2026 09:23
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants