Skip to content

MINOR: [Go] update go dependencies#40511

Merged
zeroshade merged 2 commits intoapache:mainfrom
zeroshade:go-deps-upgrade
Mar 13, 2024
Merged

MINOR: [Go] update go dependencies#40511
zeroshade merged 2 commits intoapache:mainfrom
zeroshade:go-deps-upgrade

Conversation

@zeroshade
Copy link
Copy Markdown
Member

Rationale for this change

Updating Go dependencies, several of which address vulnerabilities identified by https://deps.dev/go/github.com%2Fapache%2Farrow%2Fgo%2Fv15/v15.0.1

@github-actions github-actions bot added awaiting merge Awaiting merge and removed awaiting committer review Awaiting committer review labels Mar 13, 2024
@zeroshade zeroshade merged commit 1dd0d45 into apache:main Mar 13, 2024
@zeroshade zeroshade removed the awaiting merge Awaiting merge label Mar 13, 2024
@zeroshade zeroshade deleted the go-deps-upgrade branch March 13, 2024 17:19
@kou
Copy link
Copy Markdown
Member

kou commented Mar 13, 2024

Can we automate this by enabling Dependabot for Go?
It seems that we can use package-ecosystem: gomod for Go: https://docs.github.com/en/code-security/dependabot/dependabot-version-updates/configuration-options-for-the-dependabot.yml-file#package-ecosystem

@kou
Copy link
Copy Markdown
Member

kou commented Mar 14, 2024

#40522

@conbench-apache-arrow
Copy link
Copy Markdown

After merging your PR, Conbench analyzed the 5 benchmarking runs that have been run so far on merge-commit 1dd0d45.

There were no benchmark performance regressions. 🎉

The full Conbench report has more details. It also includes information about 5 possible false positives for unstable benchmarks that are known to sometimes produce them.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants