chore(EC-2174): bump conforma/cli and fix transitive dependency conflicts - #1831
Conversation
|
Warning Review limit reachedNext included review available in 53 minutes. View limit detailsLimit details: You’ve used the included review currently available. This review ran on the open-source allowance, not this organization's plan, because the pull request author doesn't have an assigned seat. Waiting won't change this — ask an organization admin to assign them a seat, or add seats in Billing if every seat is already assigned, then retry. Review configuration: ⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: 📒 Files selected for processing (2)
No actionable comments were generated in the recent review. 🎉 ℹ️ Recent review info⚙️ Run configurationConfiguration used: Organization UI Review profile: CHILL Plan: Advanced Run ID: ⛔ Files ignored due to path filters (1)
📒 Files selected for processing (1)
Included review availability: Your plan provides up to 1 included review per hour; 0 remain after this review. 📝 WalkthroughWalkthroughThe change updates the Go version and module dependencies. It also updates a JSON schema validation test to expect the generic “schema is invalid” error message. ChangesDependency and schema validation updates
Priority: ⚪ Not assessed Estimated code review effort: 2 (Simple) | ~10 minutes Merge Risk: ⚪ Minimal · up to This updates module dependencies and the expected generic JSON schema validation error message. No concrete merge-blocking impact is identified in the supplied change context. Suggested reviewers: 🚥 Pre-merge checks | ✅ 5✅ Passed checks (5 passed)
✨ Finishing Touches🧪 Generate unit tests (beta)
Comment |
|
🤖 Finished Review · ✅ Success · Started 8:57 AM UTC · Completed 9:10 AM UTC Commit: Runtime: claude · Model: opus → claude-opus-4-6 · Effort: high · Cost: $3.34 |
Codecov Report✅ All modified and coverable lines are covered by tests.
Flags with carried forward coverage won't be shown. Click here to find out more.
🚀 New features to boost your workflow:
|
|
Risk Assessment: moderate (2/5) DetailsDependency bump PR with large line count driven by go.sum lockfile churn; only 3 files changed with no protected paths, no security-sensitive content, and no CI changes, but elevated dependency signal (2 dep files) and zero test coverage ratio push Tier 1 up; quiet git history with no recent churn or regressions tempers overall risk to moderate. |
ReviewFindingsLow
|
|
I would bump |
Bump conforma/cli to include the ec.oci.parsed_blob builtin (EC-1836). Pin knative.dev/eventing to v0.49.2 and gocloud.dev to v0.40.0 to resolve transitive dependency conflicts where removed packages (knative.dev/pkg/metrics, knative.dev/pkg/tracing/config, gocloud.dev/docstore/awsdynamodb) broke go mod tidy. Update schema_test.rego error message to match the bumped jsonschema library. See also conforma/cli commit 4fb63b3 for the same fix in the CLI repo.
b9c0d95 to
ea1096b
Compare
@joejstuart Thanks for pointing this out, updated. |
Summary
conforma/clito include theec.oci.parsed_blobbuiltin (EC-1836)knative.dev/eventingto v0.49.2 to fix removedknative.dev/pkg/{metrics,tracing/config}importsgocloud.devto v0.40.0 to fix removedgocloud.dev/docstore/awsdynamodbimportschema_test.regoerror message to match bumped jsonschema librarySame workaround as conforma/cli commit 4fb63b3.
Blocker for: EC-2081 (use
ec.oci.parsed_blobbuiltin inparsed_blobwrapper)