Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 2, 2025

Bumps github.com/zeromicro/go-zero from 1.5.4 to 1.9.1.

Release notes

Sourced from github.com/zeromicro/go-zero's releases.

goctl/v1.9.1

Highlights

  • Code generation ergonomics:
    • Add code generation headers to safe-to-edit files for clearer ownership and customization boundaries.
    • Fix array type generation issues to ensure accurate code output.
  • API developer experience:
    • Add complete test scaffolding for API projects via the --test flag.
  • Swagger/OpenAPI correctness:
    • Correct $ref placement in array definitions when useDefinitions is enabled.
  • Stability and optimizations:
    • Fix SSE handler blocking.
    • Optimize slice lookups and Unquote utility function performance.

Detailed Changes

Code Generation

  • Add code generation headers in safe-to-edit files to clarify which files are intended for user modifications while keeping generated segments intact.
    PR: feat: add code generation headers in safe to edit files by @​kevwan (@​5136)
  • Fix array type generation error to produce correct types in generated code.
    PR: fix array type generation error by @​kesonan (@​5142)

API/CLI

  • Add complete test scaffolding support for API projects using the --test flag, enabling quicker setup of testable services.
    PR: Add complete test scaffolding support with --test flag for API projects by @​Copilot (@​5176)

Swagger/OpenAPI

  • Fix $ref placement in array definitions when useDefinitions is enabled to align with the OpenAPI/Swagger schema expectations.
    PR: fix(goctl/swagger): correct $ref placement in array definitions when useDefinitions is enabled by @​Copilot (@​5199)

Stability

  • Fix SSE handler blocking behavior that could stall event delivery under certain conditions.
    PR: fix: SSE handler blocking by @​wuqinqiang (@​5181)

Performance and Utilities

  • Optimize slice find routines and the Unquote function for better runtime efficiency.
    PR: update: optimize slice find and Unquote func by @​me-cs (@​5108)

Upgrade Notes

  • Swagger regeneration: If you rely on useDefinitions, regenerate your Swagger/OpenAPI specs to pick up the corrected $ref placement.
  • Codegen headers: Newly generated safe-to-edit files will include headers clarifying edit expectations; no action required, but helpful for code review and maintenance.

Acknowledgements

Full Changelog

v1.9.1

Highlights

  • Logging enhancements:

... (truncated)

Commits
  • ce6d0e3 fix(goctl/swagger): correct $ref placement in array definitions when useDefin...
  • fa85c84 chore: code refactoring (#5204)
  • 4408841 feat(handler): add sseSlowThreshold (#5196)
  • 271f105 Add complete test scaffolding support with --test flag for API projects (#5176)
  • cf55a88 fix(rest): change SSE SetWriteDeadline error log to debug level (#5162)
  • c1c786b chore(deps): bump github.com/redis/go-redis/v9 from 9.14.0 to 9.15.0 (#5193)
  • 988fb9d fix: SSE handler blocking (#5181)
  • d212c81 Add GitHub Copilot instructions for go-zero project (#5178)
  • bc43df2 optimize: mapreduce panic stacktrace (#5168)
  • 351b8cb chore(deps): bump github.com/redis/go-redis/v9 from 9.13.0 to 9.14.0 (#5169)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Overview

Updated On: 2025-10-02 23:06:28 UTC

Summary

This PR updates the `github.com/zeromicro/go-zero` framework from version 1.5.4 to 1.9.1 in the zaplog logging example project. This is a significant version jump spanning 4 minor versions that brings substantial improvements to the go-zero ecosystem.

The update includes several key enhancements:

  • Code generation improvements: Better ergonomics with clearer ownership boundaries through code generation headers in safe-to-edit files, and fixes for array type generation issues
  • API developer experience: Complete test scaffolding support for API projects via the --test flag
  • Swagger/OpenAPI correctness: Fixed $ref placement in array definitions when useDefinitions is enabled
  • Stability fixes: Resolution of SSE handler blocking issues that could stall event delivery
  • Performance optimizations: Enhanced slice lookups and Unquote utility function performance

Additionally, the Go language version requirement has been bumped from 1.18 to 1.21, ensuring compatibility with newer language features and performance improvements. The update cascades through numerous transitive dependencies, including significant updates to OpenTelemetry packages (v1.14.0 → v1.24.0), testing libraries (stretchr/testify v1.8.4 → v1.11.1), and system packages (golang.org/x/sys v0.10.0 → v0.30.0).

This change fits into the broader zero-examples repository as part of maintaining up-to-date demonstration code that showcases proper integration patterns with the latest go-zero framework capabilities. The zaplog example specifically demonstrates how to integrate Zap logging with go-zero applications, and keeping it current ensures developers have access to the latest logging features and stability improvements.

Important Files Changed

Changed Files
Filename Score Overview
logx/zaplog/go.mod 4/5 Updates go-zero from v1.5.4 to v1.9.1, bumps Go version to 1.21, and updates multiple dependencies
logx/zaplog/go.sum 4/5 Comprehensive checksum updates for all transitive dependencies affected by the go-zero upgrade

Confidence score: 4/5

  • This PR is safe to merge with minimal risk as it updates a well-maintained framework through regular dependency management
  • Score reflects the substantial version jump (4 minor versions) which requires attention despite being primarily enhancements and bug fixes
  • Pay close attention to the go.mod file to ensure the Go version bump to 1.21 is compatible with the deployment environment

Bumps [github.com/zeromicro/go-zero](https://github.com/zeromicro/go-zero) from 1.5.4 to 1.9.1.
- [Release notes](https://github.com/zeromicro/go-zero/releases)
- [Commits](zeromicro/go-zero@v1.5.4...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/zeromicro/go-zero
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 2, 2025
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Superseded by #539.

@dependabot dependabot bot closed this Oct 13, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/logx/zaplog/github.com/zeromicro/go-zero-1.9.1 branch October 13, 2025 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant