fix(deps): vuln minor upgrades — 7 packages (minor: 7) [apps/rpc] - #305
Conversation
![chatgpt-codex-connector[bot]](https://avatars.githubusercontent.com/in/1144995?s=60&v=4){kind=small}
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: e69a37deac
ℹ️ About Codex in GitHub
Codex has been enabled to automatically review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
When you sign up for Codex through ChatGPT, Codex can also answer questions or update the PR, like "@codex address that feedback".
| go.opentelemetry.io/otel/exporters/stdout/stdoutmetric v0.39.0 | ||
| go.opentelemetry.io/otel/sdk/metric v0.39.0 | ||
| google.golang.org/grpc v1.57.1 | ||
| go.opentelemetry.io/otel/sdk/metric v1.44.0 |
There was a problem hiding this comment.
With this module now selecting go.opentelemetry.io/otel/sdk/metric v1.44.0, the unchanged client code still calls reader1.RegisterProducer(...) and reader2.RegisterProducer(...) in calendar-client/main.go; that method is no longer on *metric.PeriodicReader in the v1.44 API, where producers are passed via reader options. As a result, building the documented calendar-client after this dependency update fails until the code is changed to use metric.WithProducer(producer) or the SDK metric module is kept on the compatible version.
Useful? React with 👍 / 👎.
Summary: Critical-severity security update — 15 packages upgraded (MINOR changes included)
Manifests changed:
apps/rpc(go)✅ Action Required: Please review the changes below. If they look good, approve and merge this PR.
Updates
Security Details
🚨 Critical & High Severity (42 fixed)
ℹ️ Other Vulnerabilities (82)
v1.16.0v1.44.0apps/rpc/golang/calendar-client/go.modv1.31.0v1.36.11apps/rpc/golang/calendar-client/go.mod📅 Dependencies Nearing EOL (2)
v0.13.0v0.40.0apps/rpc/golang/calendar-client/go.modv0.13.0v0.40.0apps/rpc/golang/protos/go.modReview Checklist
Standard review:
Update Mode: all_vulns
🤖 Generated by DataDog Automated Dependency Management System