Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Oct 2, 2025

Bumps github.com/zeromicro/go-zero from 1.5.5 to 1.9.1.

Release notes

Sourced from github.com/zeromicro/go-zero's releases.

goctl/v1.9.1

Highlights

  • Code generation ergonomics:
    • Add code generation headers to safe-to-edit files for clearer ownership and customization boundaries.
    • Fix array type generation issues to ensure accurate code output.
  • API developer experience:
    • Add complete test scaffolding for API projects via the --test flag.
  • Swagger/OpenAPI correctness:
    • Correct $ref placement in array definitions when useDefinitions is enabled.
  • Stability and optimizations:
    • Fix SSE handler blocking.
    • Optimize slice lookups and Unquote utility function performance.

Detailed Changes

Code Generation

  • Add code generation headers in safe-to-edit files to clarify which files are intended for user modifications while keeping generated segments intact.
    PR: feat: add code generation headers in safe to edit files by @​kevwan (@​5136)
  • Fix array type generation error to produce correct types in generated code.
    PR: fix array type generation error by @​kesonan (@​5142)

API/CLI

  • Add complete test scaffolding support for API projects using the --test flag, enabling quicker setup of testable services.
    PR: Add complete test scaffolding support with --test flag for API projects by @​Copilot (@​5176)

Swagger/OpenAPI

  • Fix $ref placement in array definitions when useDefinitions is enabled to align with the OpenAPI/Swagger schema expectations.
    PR: fix(goctl/swagger): correct $ref placement in array definitions when useDefinitions is enabled by @​Copilot (@​5199)

Stability

  • Fix SSE handler blocking behavior that could stall event delivery under certain conditions.
    PR: fix: SSE handler blocking by @​wuqinqiang (@​5181)

Performance and Utilities

  • Optimize slice find routines and the Unquote function for better runtime efficiency.
    PR: update: optimize slice find and Unquote func by @​me-cs (@​5108)

Upgrade Notes

  • Swagger regeneration: If you rely on useDefinitions, regenerate your Swagger/OpenAPI specs to pick up the corrected $ref placement.
  • Codegen headers: Newly generated safe-to-edit files will include headers clarifying edit expectations; no action required, but helpful for code review and maintenance.

Acknowledgements

Full Changelog

v1.9.1

Highlights

  • Logging enhancements:

... (truncated)

Commits
  • ce6d0e3 fix(goctl/swagger): correct $ref placement in array definitions when useDefin...
  • fa85c84 chore: code refactoring (#5204)
  • 4408841 feat(handler): add sseSlowThreshold (#5196)
  • 271f105 Add complete test scaffolding support with --test flag for API projects (#5176)
  • cf55a88 fix(rest): change SSE SetWriteDeadline error log to debug level (#5162)
  • c1c786b chore(deps): bump github.com/redis/go-redis/v9 from 9.14.0 to 9.15.0 (#5193)
  • 988fb9d fix: SSE handler blocking (#5181)
  • d212c81 Add GitHub Copilot instructions for go-zero project (#5178)
  • bc43df2 optimize: mapreduce panic stacktrace (#5168)
  • 351b8cb chore(deps): bump github.com/redis/go-redis/v9 from 9.13.0 to 9.14.0 (#5169)
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Greptile Overview

Updated On: 2025-10-02 23:06:24 UTC

Summary

This PR is an automated Dependabot update that bumps the core `github.com/zeromicro/go-zero` framework dependency from version 1.5.5 to 1.9.1 in the `logx/filterfields` example. This represents a significant version jump spanning 4 minor versions and includes substantial improvements to the go-zero framework.

The logx/filterfields example demonstrates custom logging functionality with sensitive data filtering using a custom SensitiveLogger that wraps the logx.Writer interface. Since this example directly integrates with go-zero's logging subsystem, updating to the latest framework version ensures it benefits from the logging enhancements and remains compatible with current go-zero features.

Key changes included in this upgrade:

  • Logging enhancements: Improvements to the core logging system that this example directly utilizes
  • Code generation improvements: Better ergonomics for generated code with clearer ownership boundaries
  • API testing scaffolding: New --test flag support for API projects
  • Stability fixes: Resolution of SSE handler blocking issues and performance optimizations
  • OpenAPI/Swagger correctness: Fixed $ref placement in array definitions

The update also bumps the Go version requirement from 1.18 to 1.21 and updates numerous transitive dependencies including OpenTelemetry packages (1.14.0 → 1.24.0), color libraries, and system packages. These updates align the example with modern Go development practices and ensure compatibility with the latest framework features.

Important Files Changed

Changed Files
Filename Score Overview
logx/filterfields/go.mod 4/5 Updates go-zero from 1.5.5 to 1.9.1, bumps Go version to 1.21, and updates transitive dependencies
logx/filterfields/go.sum 4/5 Checksum updates for all dependency version changes including major OpenTelemetry and system package updates

Confidence score: 4/5

  • This PR is safe to merge with minimal risk as it's a standard dependency update with well-documented changes
  • Score reflects the significant version jump but confidence in Dependabot's automated testing and go-zero's stability track record
  • Pay attention to the go.mod file to ensure the Go version bump to 1.21 is acceptable for your development environment

Bumps [github.com/zeromicro/go-zero](https://github.com/zeromicro/go-zero) from 1.5.5 to 1.9.1.
- [Release notes](https://github.com/zeromicro/go-zero/releases)
- [Commits](zeromicro/go-zero@v1.5.5...v1.9.1)

---
updated-dependencies:
- dependency-name: github.com/zeromicro/go-zero
  dependency-version: 1.9.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Oct 2, 2025
Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

2 files reviewed, no comments

Edit Code Review Agent Settings | Greptile

@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Oct 13, 2025

Superseded by #535.

@dependabot dependabot bot closed this Oct 13, 2025
@dependabot dependabot bot deleted the dependabot/go_modules/logx/filterfields/github.com/zeromicro/go-zero-1.9.1 branch October 13, 2025 23:05
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant