Skip to content

chore(deps): Bump github.com/automa-saga/daemonkit from 0.1.0 to 0.3.0 - #906

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/automa-saga/daemonkit-0.3.0
Open

chore(deps): Bump github.com/automa-saga/daemonkit from 0.1.0 to 0.3.0#906
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/go_modules/github.com/automa-saga/daemonkit-0.3.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 20, 2026

Copy link
Copy Markdown
Contributor

Bumps github.com/automa-saga/daemonkit from 0.1.0 to 0.3.0.

Release notes

Sourced from github.com/automa-saga/daemonkit's releases.

v0.3.0

0.3.0 (2026-07-18)

Features

  • add Go and Group goroutine-safety helpers for monitors and add supervisor panic recovery (#5) (03534a4)

v0.2.0

0.2.0 (2026-07-15)

Features

  • eventlog: add WARN level for Warning-severity milestones (#3) (9da2c27)

v0.1.1

0.1.1 (2026-07-11)

Bug Fixes

  • deps: upgrade Go to 1.26.5 to remediate SNYK-GOLANG-STDOS-17905377 (#2) (a518e96)
Commits
  • 03534a4 feat: add Go and Group goroutine-safety helpers for monitors and add supervis...
  • 9da2c27 feat(eventlog): add WARN level for Warning-severity milestones (#3)
  • a518e96 fix(deps): upgrade Go to 1.26.5 to remediate SNYK-GOLANG-STDOS-17905377 (#2)
  • 3a19c6e chore(deps): upgrade Go to 1.26.5 to fix SNYK-GOLANG-STDOS-17905377 (#1)
  • 36aebce docs: update README
  • See full diff in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner July 20, 2026 02:24
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file go Pull requests that update go code labels Jul 20, 2026
@dependabot
dependabot Bot requested a review from JeffreyDallas July 20, 2026 02:24
@swirlds-automation

swirlds-automation commented Jul 20, 2026

Copy link
Copy Markdown

Snyk checks have passed. No issues have been found so far.

Status Scan Engine Critical High Medium Low Total (0)
Open Source Security 0 0 0 0 0 issues
Licenses 0 0 0 0 0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/automa-saga/daemonkit-0.3.0 branch 2 times, most recently from d41391e to 5a99386 Compare July 24, 2026 04:23
@alex-au

alex-au commented Jul 28, 2026

Copy link
Copy Markdown
Contributor

@dependabot rebase

@dependabot
dependabot Bot force-pushed the dependabot/go_modules/github.com/automa-saga/daemonkit-0.3.0 branch from 5a99386 to 62a67ee Compare July 28, 2026 07:58
@radkomih
radkomih force-pushed the dependabot/go_modules/github.com/automa-saga/daemonkit-0.3.0 branch from 62a67ee to d238d10 Compare July 29, 2026 07:11
@alex-au

alex-au commented Jul 31, 2026

Copy link
Copy Markdown
Contributor

🤖 Dependabot review — no concerns

Reviewed the diff for github.com/automa-saga/daemonkit: v0.1.0v0.3.0 (Go non-vendored upgrade).

Checks performed:

  • ✅ Diff scoped to expected files (go.mod, go.sum only)
  • ✅ No install/build hooks added or modified
  • ✅ No new process spawning, network, or credential-access patterns
  • ✅ No workflow / CI changes (upstream .github/workflows/ changes are the upstream maintainer's own CI — do not run here)
  • ✅ No obfuscated payloads (base64 blobs, bidi/zero-width chars)
  • ✅ No init-time side effects, no new init() functions
  • ✅ No CGo, no unsafe, no opaque //go:embed blobs
  • ✅ No new transitive dependencies — joomcode/errorx and golang.org/x/sync were already in go.sum; upstream go.mod only bumped Go 1.26.0 → 1.26.5
  • ✅ All 5 upstream commits authored by Lenin Mehedy <lenin.mehedy@hashgraph.com> (Hashgraph employee) — expected for an in-house library

What changed upstream (v0.1.0 → v0.3.0):

  • goroutine.go (new): Panic-recovering goroutine helpers (Go, Group, WithContext, recoverToErr) — uses runtime/debug.Stack() for diagnostic traces. Straightforward defensive wrappers, no side effects.
  • monitor.go: Replaces bare go func() heartbeat goroutine with the new Go() helper; wraps m.Run() in safeRun() (panic → supervised restart instead of daemon crash). Behaviour-equivalent refactor with better resilience.
  • probe.go: Switches CompositeProbe.Probe from direct errgroup use to the new daemonkit.Group wrapper — adds panic recovery to sub-probes. No new external deps; errgroup is still the underlying engine.
  • eventlog/event.go: Adds LevelWarn = "WARN" constant and updated doc comment. Additive only.

Automated review by Claude. Verify before merging — this is a second pair of eyes, not a replacement for human review.

Bumps [github.com/automa-saga/daemonkit](https://github.com/automa-saga/daemonkit) from 0.1.0 to 0.3.0.
- [Release notes](https://github.com/automa-saga/daemonkit/releases)
- [Commits](automa-saga/daemonkit@v0.1.0...v0.3.0)

---
updated-dependencies:
- dependency-name: github.com/automa-saga/daemonkit
  dependency-version: 0.3.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: Rado M <radkomih@gmail.com>
@radkomih
radkomih force-pushed the dependabot/go_modules/github.com/automa-saga/daemonkit-0.3.0 branch from d238d10 to fe5572c Compare August 4, 2026 12:37
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file go Pull requests that update go code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants